| Package | Affected versions | Patched versions |
|---|---|---|
| vbulletin | = 5.0.4= 5.0.5= 5.1.0= 5.1.1= 5.1.2= 5.1.3 |
SQL injection vulnerability in vBulletin 5.0.4 through 5.1.3 Alpha 5 allows remote attackers to execute arbitrary SQL commands via the criteria[startswith] parameter to ajax/render/memberlist_items.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free