cve/2014/CVE-2014-5102.md
2024-05-26 14:27:05 +02:00

697 B

CVE-2014-5102

Description

SQL injection vulnerability in vBulletin 5.0.4 through 5.1.3 Alpha 5 allows remote attackers to execute arbitrary SQL commands via the criteria[startswith] parameter to ajax/render/memberlist_items.

POC

Reference

Github

No PoCs found on GitHub currently.