CVE-2008-2460
SQL injection vulnerability in faq.php in vBulletin 3.7.0 Gold allows remote attackers to execute arbitrary SQL commands via the q parameter in a search action.
Date published : 2008-05-27
http://www.securityfocus.com/bid/29293
http://www.securityfocus.com/archive/1/492290/100/0/threaded