vBulletin 4.0.x SQL Injection / Cross Site Request Forgery

0
53

vBulletin version 4.0.x suffers from a remote SQL injection vulnerability that can be leveraged using a cross site request forgery vulnerability.

Source: vBulletin 4.0.x SQL Injection / Cross Site Request Forgery