NuytsTech Security

CVE-2019-17271

by ·

vBulletin 5.5.4 allows SQL Injection via the ajax/api/hook/getHookList or ajax/api/widget/getWidgetList where parameter.

Date published : 2019-10-08

http://packetstormsecurity.com/files/154758/vBulletin-5.5.4-SQL-Injection.html

https://forum.vbulletin.com/forum/vbulletin-announcements/vbulletin-announcements_aa

Tags: