Sql injection

SQL injection vulnerability in vBulletin 5.0.4 through 5.1.3 Alpha 5 allows remote attackers to execute arbitrary SQL commands via the criteriastartswith parameter to ajax/render/memberlistitems...

PT-2014-6279

Name of the Vulnerable Software and Affected Versions vBulletin versions 5.0.4 through 5.1.3 Alpha 5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the criteriastartswith parameter to the "ajax/render/memberlist items" endpoint. Recommendatio...