Nice exploit, but on default vbulletin doesn't allow SWF files...