vBulletin 'widget_php' Command Execution

The version of vBulletin running on the remote host is affected by an input-validation flaw in the 'widgetConfig' parameter to the script 'ajax/render/widgetphp' that allows command execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Sql injection

vBulletin 5.5.4 allows SQL Injection via the ajax/api/hook/getHookList or ajax/api/widget/getWidgetList where parameter...

vBulletin 5.5.4 SQL Injection

---------------------------------------------------- vBulletin = 5.5.4 Two SQL Injection Vulnerabilities ---------------------------------------------------- - Software Link: https://www.vbulletin.com/ - Affected Versions: Version 5.5.4 and prior versions. - Vulnerabilities Description: 1 User...