CVE-2013-3522
SQL injection vulnerability in index.php/ajax/api/reputation/vote in vBulletin 5.0.0 Beta 11, 5.0.0 Beta 28, and earlier allows remote authenticated users to execute arbitrary SQL commands via the nodeid parameter.
- Score
- CVSS 2.0 6.5 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2013-05-10
- Last modified
- 2024-09-16
- Weaknesses
- CWE-89
Affected products
References
- http://www.exploit-db.com/exploits/24882
- http://www.osvdb.org/92031
