SQL injection vulnerability in vBulletin 5.0.4 through 5.1.3 Alpha 5 allows remote attackers to execute arbitrary SQL commands via the criteria[startswith] parameter to ajax/render/memberlist_items.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2014-07-25T19:00:00
Updated: 2024-08-06T11:34:37.268Z
Reserved: 2014-07-25T00:00:00
Link: CVE-2014-5102
Vulnrichment
No data.
NVD
Status : Modified
Published: 2014-07-25T19:55:07.050
Modified: 2024-11-21T02:11:25.293
Link: CVE-2014-5102
Redhat
No data.