I had the opportunity to test the vbulletin of my friend's website. I've noticed that is not possible to choose the file type for custom avatars. In fact, we were able to upload a .exe file instead of...