vBulletin 5.0.0 Beta 11 - 5.0.0 Beta 28 - SQL Injection

No description provided by source. Exploit Title: vBulletin 5 Beta XX SQLi 0day Google Dork: Powered by vBulletin? Version 5.0.0 Beta Date: 24/03/2013 Exploit Author: Orestis Kourides Vendor Homepage: www.vbulletin.com Software Link: Version: 5.0.0 Beta 11 - 5.0.0 Beta 28 Tested on: Linux CVE :...

CVE-2013-3522

CVE-2013-3522 is an SQL injection vulnerability in vBulletin 5.x (observed in 5.0.0 Beta 11, 5.0.0 Beta 28 and earlier) exploitable via index.php/ajax/api/reputation/vote with the nodeid parameter. The issue allows remote authenticated users to execute arbitrary SQL commands, enabling potential d...

vBulletin 5.0.0 all Beta releases SQL Injection Exploit 0day

This exploit owns any forum based on vBulletin 5. All versions. Still there is no CVE or patch. On this moment vBulletin 5.0.0 beta 21 is the last version and its affected, including the vendor's site. Wow! This is private exploit. You can buy it at https://0day.today...