Vbulletin 3.7.0 Gold >> Sql injection on faq.php

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Vbulletin 3.7.0 Gold >> Sql injection on faq.php
From: a.jasbi@xxxxxxxxx
Date: 20 May 2008 14:49:54 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

By : Ali Jasbi(Hackerz.ir security & hacking research team)
Vendor : vbulletin.org
version : 3.7.0 Gold
Vulnerability: Sql injection
http://www.domain.com/vBulletin/faq.php?s=&do=search&q=[Sql 
injection]&match=any&titlesonly=1
test it:
faq.php?s=&do=search&q='&match=any&titlesonly=1
faq.php?s=&do=search&q=%00'&match=all&titlesonly=0
Enjoy it...

Prev by Date: CA ARCserve Backup caloggerd and xdr Functions Vulnerabilities
Next by Date: Secunia Research: Foxit Reader "util.printf()" Buffer Overflow
Previous by thread: CA ARCserve Backup caloggerd and xdr Functions Vulnerabilities
Next by thread: Re: Vbulletin 3.7.0 Gold >> Sql injection on faq.php
Index(es):
- Date
- Thread