CVE-2014-125086

CVE-2014-125086 refers to a SQL injection vulnerability in the Gimmie Plugin for vBulletin 1.2.2. The issue arises from an unknown functionality in the file trigger_login.php where manipulating the userid parameter leads to SQL injection. The vulnerability is described as critical, with upgrading...

CVE-2014-125086 Gimmie Plugin trigger_login.php sql injection

A vulnerability has been found in Gimmie Plugin 1.2.2 on vBulletin and classified as critical. Affected by this vulnerability is an unknown functionality of the file triggerlogin.php. The manipulation of the argument userid leads to sql injection. Upgrading to version 1.3.0 is able to address thi...

CVE-2014-125085

A vulnerability, which was classified as critical, was found in Gimmie Plugin 1.2.2 on vBulletin. Affected is an unknown function of the file triggerratethread.php. The manipulation of the argument t/postusername leads to sql injection. Upgrading to version 1.3.0 is able to address this issue. Th...

CVE-2014-125084

A vulnerability, which was classified as critical, has been found in Gimmie Plugin 1.2.2 on vBulletin. This issue affects some unknown processing of the file triggerreferral.php. The manipulation of the argument referrername leads to sql injection. Upgrading to version 1.3.0 is able to address th...

Sql injection

A vulnerability, which was classified as critical, was found in Gimmie Plugin 1.2.2 on vBulletin. Affected is an unknown function of the file triggerratethread.php. The manipulation of the argument t/postusername leads to sql injection. Upgrading to version 1.3.0 is able to address this issue. Th...

Sql injection

A vulnerability, which was classified as critical, has been found in Gimmie Plugin 1.2.2 on vBulletin. This issue affects some unknown processing of the file triggerreferral.php. The manipulation of the argument referrername leads to sql injection. Upgrading to version 1.3.0 is able to address th...

Gimmie vBulletin SQL注入漏洞

Gimmie vBulletin is a Gimmie open source forum plugin . Gimmie vBulletin version 1.2.2 suffers from a SQL injection vulnerability , the vulnerability stems from the wrong operation of the parameter userid can lead to sql injection...

Gimmie vBulletin SQL注入漏洞

Gimmie vBulletin is a Gimmie open source forum plugin . Gimmie vBulletin 1.2.2 version of the SQL injection vulnerability , the vulnerability stems from the file triggerreferral.php unknown handling problems , the operation of the parameter referrername will lead to sql injection...

CVE-2014-125085

Gimmie Plugin for vBulletin version 1.2.2 contains a SQL injection in trigger_ratethread.php, triggered by manipulating the t/postusername parameter in an unknown function. The vulnerability is rated critical with potential remote exploitation (as described in multiple sources, e.g., PT-2023-1572...

CVE-2014-125085 Gimmie Plugin trigger_ratethread.php sql injection

A vulnerability, which was classified as critical, was found in Gimmie Plugin 1.2.2 on vBulletin. Affected is an unknown function of the file triggerratethread.php. The manipulation of the argument t/postusername leads to sql injection. Upgrading to version 1.3.0 is able to address this issue. Th...

CVE-2014-125084

CVE-2014-125084 affects Gimmie Plugin 1.2.2 for vBulletin. The vulnerability stems from unsafe handling in trigger_referral.php where the referrername parameter enables SQL injection, with a critical severity (CVSS v3.1: 9.8). Affected component is the SQL query construction in processing the tri...

CVE-2014-125084 Gimmie Plugin trigger_referral.php sql injection

A vulnerability, which was classified as critical, has been found in Gimmie Plugin 1.2.2 on vBulletin. This issue affects some unknown processing of the file triggerreferral.php. The manipulation of the argument referrername leads to sql injection. Upgrading to version 1.3.0 is able to address th...

Gimmie vBulletin SQL注入漏洞

Gimmie vBulletin is a Gimmie open source forum plugin . Gimmie vBulletin version 1.2.2 has a SQL injection vulnerability , the vulnerability stems from a problem with the unknown function in the file triggerratethread.php , the operation of the parameter t/postusername will lead to sql injection...

CVE-2023-25135

vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP request that triggers deserialization. This occurs because verifyserialized checks that a value is serialized by calling unserialize and then checking for errors. The fixed versions a...

CVE-2023-25135

vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP request that triggers deserialization. This occurs because verifyserialized checks that a value is serialized by calling unserialize and then checking for errors. The fixed versions a...

Deserialization of untrusted data

vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP request that triggers deserialization. This occurs because verifyserialized checks that a value is serialized by calling unserialize and then checking for errors. The fixed versions a...

CVE-2023-25135

vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP request that triggers deserialization. This occurs because verifyserialized checks that a value is serialized by calling unserialize and then checking for errors. The fixed versions a...

CVE-2023-25135

vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP request that triggers deserialization. This occurs because verifyserialized checks that a value is serialized by calling unserialize and then checking for errors. The fixed versions a...

Gimmie vBulletin 代码问题漏洞

Gimmie vBulletin is an open source forum plugin for Gimmie. A security vulnerability exists in vBulletin prior to version 5.6.9. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

vBulletin < 5.6.7 Patch Level 1 / < 5.6.8 Patch Level 1 / < 5.6.9 Patch Level 1 Remote Code Execution

According to the self-reported version in its response header, the version of vBulletin hosted on the remote web server is 5.6.7 Patch Level 1, 5.6.8 Patch Level 1 or 5.6.9 Patch Level 1. It is, therefore, affected by a Remote Code Execution via usersearchprefs parameter within ajax/api/user/save...