vBulletin 5.5.x < 5.5.2 Patch Level 2 Multiple Vulnerabilities

According to the self-reported version in its response header, the version of vBulletin hosted on the remote web server is 5.5.x 5.5.2 Patch Level 2, 5.5.3 5.5.3 Patch Level 2 or 5.5.4 5.5.4 Patch Level 2. It is, therefore, affected by multiples vulnerabilities : - A SQL injection vulnerability v...

CVE-2019-17271: Improper Neutralization of Special Elements used in an SQL Command

vBulletin 5.5.4 allows SQL Injection via the ajax/api/hook/getHookList or ajax/api/widget/getWidgetList where parameter...

PT-2019-15053

Name of the Vulnerable Software and Affected Versions vBulletin version 5.5.4 Description The issue allows SQL Injection via the "ajax/api/hook/getHookList" or "ajax/api/widget/getWidgetList" API endpoints, where a specific parameter is vulnerable. Recommendations For version 5.5.4, consider...