| Package | Affected versions | Patched versions |
|---|---|---|
| vbulletin | = 3.0.0= 3.0.0_beta_2= 3.0.0_can4= 3.0.0_rc4= 3.0.1= 3.0.2= 3.0.3= 3.0.4= 3.0.5= 3.0.6= 3.0_beta_2 |
SQL injection vulnerability in (1) ttlast.php and (2) last10.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL statements via the fsel parameter, as demonstrated using last.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free