Unscored CVE-2008-2460 EUVD-2008-2455GHSA-8fwj-hx3w-q6cq

SQL injection vulnerability in faq.php in vBulletin 3.7.0 Gold allows remote attackers to execute arbitrary SQL commands via the q paramete…

Published May 27, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in faq.php in vBulletin 3.7.0 Gold allows remote attackers to execute arbitrary SQL commands via the q parameter in a search action.

References

vbulletin-faq-sql-injection(42541) vdb-entry
29293 vdb-entry
20080520 Vbulletin 3.7.0 Gold >> Sql injection on faq.php mailing-list