CVE-2016-6195
CRITICAL EXPLOITED IN THE WILD NUCLEIvBulletin <4.2.2 PL5 & <4.2.3 PL1 - SQL Injection
Title source: llmExploitation Summary
CVE-2016-6195 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io). EIP tracks 3 public exploits from researchers including Manish Tanwar, vaishakhcv, winterwolf32. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates SQL injection in vBulletin's forumrunner addon, allowing enumeration of table names, column names, and user credentials via crafted HTTP requests.
Description
SQL injection vulnerability in forumrunner/includes/moderation.php in vBulletin before 4.2.2 Patch Level 5 and 4.2.3 before Patch Level 1 allows remote attackers to execute arbitrary SQL commands via the postids parameter to forumrunner/request.php, as exploited in the wild in July 2016.
Exploits (3)
This exploit demonstrates SQL injection in vBulletin's forumrunner addon, allowing enumeration of table names, column names, and user credentials via crafted HTTP requests.
The repository contains a functional Perl script that exploits a SQL injection vulnerability in vBulletin's ForumRunner plugin (CVE-2016-6195). The exploit sends crafted HTTP requests to extract sensitive data from the database, including user credentials and table names.
The repository contains a functional Perl script that exploits a SQL injection vulnerability in vBulletin's ForumRunner plugin (CVE-2016-6195). The exploit sends crafted HTTP requests to extract sensitive data from the database, including user credentials.
Nuclei Templates (1)
title:"Powered By vBulletin" || http.html:"powered by vbulletin" || http.component:"vbulletin" || http.title:"powered by vbulletin" || cpe:"cpe:2.3:a:vbulletin:vbulletin"
body="powered by vbulletin" || title="powered by vbulletin"
References (4)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H