CVE-2013-3522
EXPLOITEDvBulletin 5.0.0 Beta 11 and earlier - Authenticated SQL Injection via nodeid Parameter
Title source: llmExploitation Summary
CVE-2013-3522 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 4 public exploits from researchers including Metasploit, Orestis Kourides, Orestis Kourides, sinn3r, juan vazquez, including a Metasploit module auxiliary/gather/vbulletin_vote_sqli.
AI-analyzed exploit summary This Metasploit module exploits a SQL injection vulnerability in vBulletin 5 to extract user credentials and deploy a PHP payload via admin panel access. It automates the process of brute-forcing node IDs, extracting user data, and installing a malicious product.
Description
SQL injection vulnerability in index.php/ajax/api/reputation/vote in vBulletin 5.0.0 Beta 11, 5.0.0 Beta 28, and earlier allows remote authenticated users to execute arbitrary SQL commands via the nodeid parameter.
Exploits (4)
This Metasploit module exploits a SQL injection vulnerability in vBulletin 5 to extract user credentials and deploy a PHP payload via admin panel access. It automates the process of brute-forcing node IDs, extracting user data, and installing a malicious product.
This exploit targets a SQL injection vulnerability in vBulletin 5 Beta versions 11-28. It authenticates with provided credentials and then sends a maliciously crafted POST request to trigger a blind SQLi, extracting the database version.
This Metasploit module exploits a SQL injection vulnerability in vBulletin 5 to extract usernames and password hashes. It uses a brute-force approach to find a valid node ID and then performs SQLi to dump credentials.
This Metasploit module exploits a SQL injection vulnerability in vBulletin 5 to extract user credentials and deploy a PHP payload via admin panel access. It uses a time-based blind SQLi technique to extract data and leverages stolen credentials for authentication.