CVE-2013-3522

This Metasploit module exploits a SQL injection vulnerability in vBulletin 5 to extract user credentials and deploy a PHP payload via admin panel access. It automates the process of brute-forcing node IDs, extracting user data, and installing a malicious product.

This exploit targets a SQL injection vulnerability in vBulletin 5 Beta versions 11-28. It authenticates with provided credentials and then sends a maliciously crafted POST request to trigger a blind SQLi, extracting the database version.

This Metasploit module exploits a SQL injection vulnerability in vBulletin 5 to extract usernames and password hashes. It uses a brute-force approach to find a valid node ID and then performs SQLi to dump credentials.

This Metasploit module exploits a SQL injection vulnerability in vBulletin 5 to extract user credentials and deploy a PHP payload via admin panel access. It uses a time-based blind SQLi technique to extract data and leverages stolen credentials for authentication.