EIP-2026-113002

This exploit demonstrates a SQL injection vulnerability in vBulletin 4.0.x to 4.1.2 via the 'search.php' endpoint. The PoC provides specific payloads to extract database information, table names, and user credentials (username, email, password, salt) through UNION-based SQLi.