CVE-2016-6195

The vBulletin forum software (versions 3.6.0 through 4.2.3) is vulnerable to an SQL injection vulnerability in the core forumrunner addon. Specifically, the vulnerability exists in the forumrunner/includes/moderation.php file, where a remote attacker can execute arbitrary SQL commands by passing ...