CVE-2013-3527

🗓️ 10 May 2013 21:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 43 Views🌐 WEB

Multiple SQL injection in Vanilla Forums before 2.0.18.

Reporter	Title	Published	Views	Family All 6
0day.today	Vanilla Forums 2.0.18.7 Remote Code Execution Exploit	30 May 201700:00	–	zdt
Check Point Advisories	Vanilla Forums SQL Injection (CVE-2013-3527)	28 Jun 202000:00	–	checkpoint_advisories
Cvelist	CVE-2013-3527	10 May 201321:00	–	cvelist
EUVD	EUVD-2013-3462	7 Oct 202500:30	–	euvd
NVD	CVE-2013-3527	10 May 201321:55	–	nvd
Prion	Sql injection	10 May 201321:55	–	prion

NVD

Node

vanillaforums vanillaRange≤2.0.18.7

OR

vanillaforums vanillaMatch2.0.1

OR

vanillaforums vanillaMatch2.0.2

OR

vanillaforums vanillaMatch2.0.3

OR

vanillaforums vanillaMatch2.0.4

OR

vanillaforums vanillaMatch2.0.5

OR

vanillaforums vanillaMatch2.0.6

OR

vanillaforums vanillaMatch2.0.7

OR

vanillaforums vanillaMatch2.0.8

OR

vanillaforums vanillaMatch2.0.9

OR

vanillaforums vanillaMatch2.0.10

OR

vanillaforums vanillaMatch2.0.11

OR

vanillaforums vanillaMatch2.0.12

OR

vanillaforums vanillaMatch2.0.13

OR

vanillaforums vanillaMatch2.0.14

OR

vanillaforums vanillaMatch2.0.15

OR

vanillaforums vanillaMatch2.0.16

OR

vanillaforums vanillaMatch2.0.16.1

OR

vanillaforums vanillaMatch2.0.17

OR

vanillaforums vanillaMatch2.0.17.1

OR

vanillaforums vanillaMatch2.0.17.2

OR

vanillaforums vanillaMatch2.0.17.3

OR

vanillaforums vanillaMatch2.0.17.4

OR

vanillaforums vanillaMatch2.0.17.5

OR

vanillaforums vanillaMatch2.0.17.6

OR

vanillaforums vanillaMatch2.0.17.7

OR

vanillaforums vanillaMatch2.0.17.8

OR

vanillaforums vanillaMatch2.0.17.9

OR

vanillaforums vanillaMatch2.0.17.10

OR

vanillaforums vanillaMatch2.0.18

OR

vanillaforums vanillaMatch2.0.18alpha3

OR

vanillaforums vanillaMatch2.0.18beta1

OR

vanillaforums vanillaMatch2.0.18beta2

OR

vanillaforums vanillaMatch2.0.18beta4

OR

vanillaforums vanillaMatch2.0.18rc1

OR

vanillaforums vanillaMatch2.0.18rc2

OR

vanillaforums vanillaMatch2.0.18rc3

OR

vanillaforums vanillaMatch2.0.18.1

OR

vanillaforums vanillaMatch2.0.18.3

OR

vanillaforums vanillaMatch2.0.18.4

OR

vanillaforums vanillaMatch2.0.18.5

OR

vanillaforums vanillaMatch2.0.18.6

Source	Link
osvdb	www.osvdb.org/92109
securityfocus	www.securityfocus.com/bid/58922
mfs-enterprise	www.mfs-enterprise.com/wordpress/2013/04/05/vanilla-forums-2-0-18-sql-injection-insert-arbitrary-user-dump-usertable/
seclists	www.seclists.org/fulldisclosure/2013/Apr/57
archives	www.archives.neohapsis.com/archives/bugtraq/2013-04/0068.html
vanillaforums	www.vanillaforums.org/discussion/23339/security-update-vanilla-2-0-18-7
exploit-db	www.exploit-db.com/exploits/24927
secunia	www.secunia.com/advisories/52825
packetstormsecurity	www.packetstormsecurity.com/files/121151/Vanilla-Forums-2.0.18.4-SQL-Injection.html
osvdb	www.osvdb.org/92110

Parameter	Position	Path	Description	CWE
name	request body	forumsubdomain/entry/signin	SQL injection via parameter name in Form/Email array in entry/signin	CWE-89
name	request body	forumsubdomain/entry/passwordrequest	SQL injection via parameter name in Form/Email array in entry/passwordrequest	CWE-89

29 Apr 2026 01:13Current

8.8High risk

Vulners AI Score8.8

CVSS 27.5

EPSS0.03643

cve-2013-3527 sql injection security vulnerability vanilla forums remote attack nvd