Exploitation Summary
EIP tracks 4 public exploits for CVE-2005-3019. PoCs published by [email protected].
AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in vBulletin's joinrequests.php file, where the 'request' parameter is not properly sanitized. It includes a sample POST request demonstrating the injection point but lacks executable exploit code.
Description
Multiple SQL injection vulnerabilities in vBulletin before 3.0.9 allow remote attackers to execute arbitrary SQL commands via the (1) request parameter to joinrequests.php, (2) limitnumber or (3) limitstart to user.php, (4) usertitle.php, or (5) usertools.php.
Exploits (4)
The provided text describes a SQL injection vulnerability in vBulletin's joinrequests.php file, where the 'request' parameter is not properly sanitized. It includes a sample POST request demonstrating the injection point but lacks executable exploit code.
This is a vulnerability writeup describing SQL injection vulnerabilities in vBulletin's admincp/usertools.php. It mentions the lack of input sanitization but does not provide exploit code or technical details for reproduction.
The provided text describes SQL injection vulnerabilities in vBulletin's admincp/usertitle.php, specifically in the 'do=edit' and 'do=pmuserstats' parameters. It references CVE-2005-3019 but lacks actual exploit code or proof-of-concept details.
The provided text describes SQL injection vulnerabilities in vBulletin's admincp/user.php, specifically in the 'limitnumber' and 'limitstart' parameters. It references CVE-2005-3019 but does not include actual exploit code or a proof-of-concept.