EIP-2026-113025

This exploit demonstrates a blind SQL injection vulnerability in vBulletin's vbBux/vbPlaza mod (vbplaza.php) by manipulating the 'name' parameter to extract admin credentials. The PoC uses ASCII encoding to retrieve the password and username from the database.