Gimmie Plugin SQL Injection

The vulnerability in the triggerratethread.php script of the Gimmie Plugin is related to the lack of protection for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

CVE-2014-125085: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in Gimmie Plugin 1.2.2 on vBulletin. Affected is an unknown function of the file triggerratethread.php. The manipulation of the argument t/postusername leads to sql injection. Upgrading to version 1.3.0 is able to address this issue. Th...

Gimmie vBulletin SQL injection vulnerability

Gimmie vBulletin is a Gimmie open source forum plugin . Gimmie vBulletin version 1.2.2 has a SQL injection vulnerability , the vulnerability stems from a problem with the unknown function in the file triggerratethread.php , the operation of the parameter t/postusername will lead to sql injection...