EIP-2026-113003

This is a technical writeup detailing an SQL injection vulnerability in vBulletin 4.x.x to 4.1.3, specifically in the 'messagegroupid' parameter. The vulnerability arises due to improper input validation in the file '/vbforum/search/type/socialgroupmessage.php' at line 388, allowing attackers to inject malicious SQL queries.