vBulletin 4.0.x => 4.1.2 Automatic SQL Injection exploit

This is my new automatic vBulletin exploit. It exploits the well-known SQL Injection vulnerability in versions 4.0.x to 4.1.2 of vBulletin but for the first time it is automatic. Usage Info First of all remember to log in and then log out not only log out from the forum you want to hack before...

vBulletin 4.1.2 SQL Injection

vBulletin 4.0.x = 4.1.2 AUTOMATIC SQL Injection exploit Author: D35m0nd142, Google Dork: inurl:search.php?searchtype=1 Date: 02/09/2014 Vendor Homepage: http://www.vbulletin.com/ Tested on: vBulletin 4.1.2 Usage: perl exploit.pl Tutorial video: https://www.youtube.com/watch?v=jec3nkoYFc IMPORTANT...

Easy Forms for vBulletin 4.X - Upload Shell Code / Remote Code Execute

Easy Forms vBuletin 4.x have suffers from a remote code execute and upload shell code. This is private exploit. You can buy it at https://0day.today...

vBulletin 4.0.x < 4.1.2 - 'search.php?cat' SQL Injection

vBulletin 4.0.x = 4.1.2 AUTOMATIC SQL Injection exploit Author: D35m0nd142, Google Dork: inurl:search.php?searchtype=1 Date: 02/09/2014 Vendor Homepage: http://www.vbulletin.com/ Tested on: vBulletin 4.1.2 Usage: perl exploit.pl Tutorial video: https://www.youtube.com/watch?v=jec3nkoYFc...

CVE-2014-5102

SQL injection vulnerability in vBulletin 5.0.4 through 5.1.3 Alpha 5 allows remote attackers to execute arbitrary SQL commands via the criteriastartswith parameter to ajax/render/memberlistitems...

Sql injection

SQL injection vulnerability in vBulletin 5.0.4 through 5.1.3 Alpha 5 allows remote attackers to execute arbitrary SQL commands via the criteriastartswith parameter to ajax/render/memberlistitems...

CVE-2014-5102

SQL injection vulnerability in vBulletin 5.0.4 through 5.1.3 Alpha 5 allows remote attackers to execute arbitrary SQL commands via the criteriastartswith parameter to ajax/render/memberlistitems...

CVE-2014-5102

CVE-2014-5102: A SQL injection in vBulletin 5.0.4 through 5.1.3 Alpha 5 allows remote execution of arbitrary SQL via the criteria[startswith] parameter to ajax/render/memberlist_items. This is a network‑level vulnerability with low complexity and no authentication required, impacting confidential...

vBulletin 5.1.2 SQL Injection

?php / Author: Nytro Powered by: Romanian Security Team Price: Free. Educational. / errorreportingEALL; iniset'displayerrors', 1; // Get arguments $targeturl = isset$argv1 ? $argv1 : 'https://rstforums.com/v5'; $expression = strreplace'/', '\/', $targeturl; // Function to send a POST request...

vBulletin 5.1.2 SQL Injection Exploit 0day

vBulletin 5.1.2 SQL Injection Exploit + bonus fresh vBulletin forum database A security issue has been reported to us that affects the versions of vBulletin listed here: 5.0.4, 5.0.5, 5.1.0, 5.1.1, and 5.1.2 We have released security patches to account for this vulnerability. The issue may allow...

vBulletin 4.0.8 PL1 XSS Filter Bypass within Profile Customization

No description provided by source. Exploit Title: vBulletin 4.0.8 PL1 - XSS Filter Bypass within Profile Customization Google Dork: Powered by vBulletin Version 4.0.8 -vBulletin.com is now powered by Date: 20th November 2010 Author: MaXe Software Link: Commercial software. Version: 4.0.8 PL1...

VBulletin 3.0/3.5 Profile.PHP Email Field HTML Injection Vulnerability

No description provided by source...

vBulletin Two-Step External Link Module 'externalredirect.php' Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/39597/info Two-Step External Link module for vBulletin is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execut...

VBulletin 3.0.14 global.php Encoded URL XSS

No description provided by source. source: http://www.securityfocus.com/bid/19358/info vBulletin is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the...

vBulletin 2.3 .x - SQL Injection Vulnerability

No description provided by source...

VBulletin 1.0.1 lite/2.x/3.0 /admincp/user.php Multiple Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/14872/info vBulletin is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitatio...

MKPortal 1.1 - Multiple Input Validation Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/17651/info MKPortal is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly saniti...

VBulletin 2.0.x/2.2.x members2.php Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6246/info Due to insufficient sanitization of user supplied values, it is possible to exploit a vulnerability in VBulletin. By passing an invalid value to a variable located in 'members2.php', it is possible to generate a...

vBulletin 5.0.0 Beta 11 - 5.0.0 Beta 28 - SQL Injection

No description provided by source. Exploit Title: vBulletin 5 Beta XX SQLi 0day Google Dork: Powered by vBulletin? Version 5.0.0 Beta Date: 24/03/2013 Exploit Author: Orestis Kourides Vendor Homepage: www.vbulletin.com Software Link: Version: 5.0.0 Beta 11 - 5.0.0 Beta 28 Tested on: Linux CVE :...

VBulletin 1.0.1 lite/2.x/3.0 joinrequests.php request Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/14872/info vBulletin is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitatio...