Security Advisory

CVE-2016-6195

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2016-08-30 19:00:00

Last updated 2024-08-06 01:22:20

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

SQL injection vulnerability in forumrunner/includes/moderation.php in vBulletin before 4.2.2 Patch Level 5 and 4.2.3 before Patch Level 1 allows remote attackers to execute arbitrary SQL commands via the postids parameter to forumrunner/request.php, as exploited in the wild in July 2016.

← Browse all CVEs View on cve.org ↗