Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-112996. PoCs published by indoushka.
AI-analyzed exploit summary This Perl script exploits an SQL injection vulnerability in vBulletin 4.0.1 by crafting a malicious request to misc.php, allowing an attacker to dump user passwords from the database. The exploit targets the 'sub=profile' parameter and uses a UNION-based SQLi to extract password hashes.
Description
vBulletin 4.0.1 - 'misc.php' SQL Injection
Exploits (1)
This Perl script exploits an SQL injection vulnerability in vBulletin 4.0.1 by crafting a malicious request to misc.php, allowing an attacker to dump user passwords from the database. The exploit targets the 'sub=profile' parameter and uses a UNION-based SQLi to extract password hashes.