CVE-2013-3522 SQL injection vulnerability in index.php/ajax/api/reputation/vote in vBulletin 5.0.0 Beta 11, 5.0.0 Beta 28, and earlier allows remote authenticated users to execute arbitrary SQL commands via the nod...
MediumCVSS 6.5
EPSS 27.1%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in index.php/ajax/api/reputation/vote in vBulletin 5.0.0 Beta 11, 5.0.0 Beta 28, and earlier allows remote authenticated users to execute arbitrary SQL commands via the nodeid parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vbulletin | = 5.0.0-beta_11 | No fix listed |
| vbulletin | = 5.0.0-beta_28 | No fix listed |