CVE-2013-3522

SQL injection vulnerability in index.php/ajax/api/reputation/vote in vBulletin 5.0.0 Beta 11, 5.0.0 Beta 28, and earlier allows remote authenticated users to execute arbitrary SQL commands via the nodeid parameter...

Sql injection

SQL injection vulnerability in index.php/ajax/api/reputation/vote in vBulletin 5.0.0 Beta 11, 5.0.0 Beta 28, and earlier allows remote authenticated users to execute arbitrary SQL commands via the nodeid parameter...

CVE-2013-3522

SQL injection vulnerability in index.php/ajax/api/reputation/vote in vBulletin 5.0.0 Beta 11, 5.0.0 Beta 28, and earlier allows remote authenticated users to execute arbitrary SQL commands via the nodeid parameter...

CVE-2013-3522

CVE-2013-3522 is an SQL injection vulnerability in vBulletin 5.x (observed in 5.0.0 Beta 11, 5.0.0 Beta 28 and earlier) exploitable via index.php/ajax/api/reputation/vote with the nodeid parameter. The issue allows remote authenticated users to execute arbitrary SQL commands, enabling potential d...

vBulletin 5 Beta index.php/ajax/api/reputation/vote/ SQL注入漏洞

No description provided by source...

VBulletin 5.0 all beta Automated SQL Injection and data extractor

This is automated injector to exploit and extract all data whatever we want from target website using Vbulletin 5.0 all beta with SQLi vulnerability.. Vulnerability Credit : 0x0a still there is no CVE or patch. On this moment vBulletin 5.0.0 beta 28 is the last version and it is affected with it...

vBulletin 5.0.0 Beta xx SQL Injection

SQL Injection vulnerability in vBulletin nodeid Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

VBulletin 'nodeid'参数SQL注入漏洞

BUGTRAQ ID: 58754 vBulletin是一个强大灵活并可完全根据自己的需要定制的论坛程序套件。 VBulletin 5.0.0 Beta 11 - 5.0.0 Beta 28及其他版本在 'nodeid' 参数的实现上存在SQL注入漏洞，攻击者可利用此漏洞破坏应用，执行未授权操作。 0 VBulletin 厂商补丁： VBulletin --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.vbulletin.com/ !/usr/bin/perl use LWP::UserAgent;...

vBulletin 5.0.0 Beta 11 5.0.0 Beta 28 - SQL Injection

vBulletin 5.0.0 Beta 11 5.0.0 Beta 28 - SQL Injection Exploit Title: vBulletin 5 Beta XX SQLi 0day Google Dork: "Powered by vBulletin™ Version 5.0.0 Beta" Date: 24/03/2013 Exploit Author: Orestis Kourides Vendor Homepage: www.vbulletin.com Software Link: Version: 5.0.0 Beta 11 - 5.0.0 Beta 28...

vBulletin 5.0.0 Beta 11 < 5.0.0 Beta 28 - SQL Injection

Exploit Title: vBulletin 5 Beta XX SQLi 0day Google Dork: "Powered by vBulletin™ Version 5.0.0 Beta" Date: 24/03/2013 Exploit Author: Orestis Kourides Vendor Homepage: www.vbulletin.com Software Link: Version: 5.0.0 Beta 11 - 5.0.0 Beta 28 Tested on: Linux CVE : None !/usr/bin/perl use...

vBulletin index.php/ajax/api/reputation/vote nodeid Parameter SQL Injection

This module exploits a SQL injection vulnerability found in vBulletin 5 that has been used in the wild since March 2013. This module uses the sqli to extract the web application's usernames and hashes. With the retrieved information tries to log into the admin control panel in order to deploy the...

vBulletin Password Collector via nodeid SQL Injection

This module exploits a SQL injection vulnerability found in vBulletin 5 that has been used in the wild since March 2013. This module can be used to extract the web application's usernames and hashes, which could be used to authenticate into the vBulletin admin control panel. Module Options msf us...

vBulletin 5.0.0 Beta Release 0day Exploit

It is an SQL Injection, not the same as others one on the wild. It works on any vBulletin 5, any Beta Release including the latest. It doesnt work on lower versions, such as 4.1,4.2,3.8, etc. / The screenshots are taken on a vBulletin 5.0.0 Beta 18, but a moderator can confirm its working on high...

PT-2013-15: XML External Entities Injection in vBulletin 5 Connect

The specialists of the Positive Research center have detected an XML External Entities Injection vulnerability in vBulletin 5 Connect. The vulnerability was detected in "appendersocketserver.php" of the Apache log4php library used by vBulletin. PHP's built-in SoapClient class allows the use of...

iCart Pro version 4.0.1 SQL Injection Vulnerability

iCart Pro version 4.0.1 appears to suffer from a remote SQL injection vulnerability. Exploit Title: vbcovor ICART SQLI Date: 25/01/2013 Authors: n3tw0rk Contact: Mail:email protected Product: iCart Pro Software Version 4.0.1 Product Download: http://www.vbcover.com/icart.php?do=product&productid=...

iCart Pro 4.0.1 SQL Injection

Exploit Title: vbcovor ICART SQLI Date: 25/01/2013 Authors: n3tw0rk Contact: Mail:[email protected] Product: iCart Pro Software Version 4.0.1 Product Download: http://www.vbcover.com/icart.php?do=product&productid=61 Google Dork: inurlicart.php Require Editting product access for SQL error...

CVE-2011-5251

Open redirect vulnerability in forum/login.php in vBulletin 4.1.3 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter in a lostpw action...

Open redirect

Open redirect vulnerability in forum/login.php in vBulletin 4.1.3 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter in a lostpw action...

CVE-2011-5251

Open redirect vulnerability in forum/login.php in vBulletin 4.1.3 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter in a lostpw action...

CVE-2011-5251

This CVE concerns an open redirect in vBulletin 4.1.3 and earlier on the login flow (forum/login.php). The flaw allows remote attackers to redirect users to arbitrary sites and facilitate phishing via the url parameter in the lostpw action . Exploitation details in the available sources are limit...