CVE-2007-2911

CVE-2007-2911 : A SQL injection in Jelsoft’s vBulletin admincp/attachment.php (before 3.6.6) allows remote authenticated administrators to execute arbitrary SQL via the "Attached After" field (GPC['search']['datelineafter']). This is related to CVE-2007-1573. Affected product/version: vBulletin p...