Security Advisory
CVE-2014-5102
7.5
Vulnerability Description
SQL injection vulnerability in vBulletin 5.0.4 through 5.1.3 Alpha 5 allows remote attackers to execute arbitrary SQL commands via the criteria[startswith] parameter to ajax/render/memberlist_items.
Published Date
July 25, 2014
Official Source
NIST NVD Advisory