EUVD-2012-4611

Malware in sbrugna...

CVE-2012-4686: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in announcement.php in vBulletin 4.1.10 allows remote attackers to execute arbitrary SQL commands via the announcementid parameter...

VBulletin 4.1.10 'announcementid'参数SQL注入漏洞

Bugtraq ID: 52897 VBulletin是一款流行的论坛程序 VBulletin announcement.php脚本不正确处理提交给announcementid的参数，攻击者可以提交恶意SQL查询，获得敏感数据库信息或控制应用系统 0 VBulletin 4.1.10 厂商解决方案 目前没有详细解决方案提供: http://www.vbulletin.com/ TarGeT/announcement.php?a=&announcementid=Sql...