CVE-2014-5102

CVE-2014-5102: A SQL injection in vBulletin 5.0.4 through 5.1.3 Alpha 5 allows remote execution of arbitrary SQL via the criteria[startswith] parameter to ajax/render/memberlist_items. This is a network‑level vulnerability with low complexity and no authentication required, impacting confidential...