Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Bugtraq: Re: Vbulletin 3.7.0 Gold >> Sql injection on faq.php

Re: Vbulletin 3.7.0 Gold >> Sql injection on faq.php

From: Matias Blanco <blue_at_corest.com>
Date: Wed, 21 May 2008 15:21:07 -0300

This exploit is valid. We've just exploted it.

VBulletin 3.7.0 Gold.

martin.meredith_at_vbulletin.com wrote:
> This is invalid. the variable q is taken, split into words, and then each word is escaped for usage within the DB.
>
> Once again, this is invalid
>
Received on May 21 2008

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]