CVE-2005-3019: Undefined Security Weakness

Multiple SQL injection vulnerabilities in vBulletin before 3.0.9 allow remote attackers to execute arbitrary SQL commands via the 1 request parameter to joinrequests.php, 2 limitnumber or 3 limitstart to user.php, 4 usertitle.php, or 5 usertools.php...