CVE-2019-17271

CVE-2019-17271 affects vBulletin 5.x, specifically the 5.5.4 release, where an SQL injection flaw exists in the AJAX endpoints ajax/api/hook/getHookList and ajax/api/widget/getWidgetList via an unsafely handled parameter. The vulnerability stems from improper input handling in these endpoints, en...

vBulletin 5.5.4 SQL Injection

---------------------------------------------------- vBulletin = 5.5.4 Two SQL Injection Vulnerabilities ---------------------------------------------------- - Software Link: https://www.vbulletin.com/ - Affected Versions: Version 5.5.4 and prior versions. - Vulnerabilities Description: 1 User...