EIP-2026-112996

This Perl script exploits an SQL injection vulnerability in vBulletin 4.0.1 by crafting a malicious request to misc.php, allowing an attacker to dump user passwords from the database. The exploit targets the 'sub=profile' parameter and uses a UNION-based SQLi to extract password hashes.