EIP-2026-113028

This is a technical writeup detailing a SQL injection vulnerability in vBulletin vBSSO Single Sign-On versions <= 1.4.14. The vulnerability exists in the /vbsso/avatar.php file within the fetchUserinfo function, allowing an attacker to extract sensitive user information via a crafted UNION ALL SELECT query.