EIP-2026-113005

The code describes an SQL injection vulnerability in vBulletin 4.1.12 due to insufficient sanitization of user-supplied data in the 'u' parameter of the 'blog_plugin_useradmin.php' script. The vulnerability allows attackers to manipulate SQL queries, potentially leading to unauthorized data access or modification.