module

vBulletin /ajax/api/content_infraction/getIndexableContent nodeid Parameter SQL Injection

Disclosed
Mar 12, 2020

Description

This module exploits a SQL injection vulnerability found in vBulletin 5.x.x to dump the user
table information or to dump all of the vBulletin tables (based on the selected options). This
module has been tested successfully on VBulletin Version 5.6.1 on Ubuntu Linux.
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.