auxiliary/gather/vbulletin_getindexablecontent_sqli

functional

vBulletin /ajax/api/content_infraction/getIndexableContent nodeid Parameter SQL Injection

view exploit source metasploittype auxiliarypublished 2020-03-12catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2020-12720US	critical9.8OT critical	88.9% (100th)	Exploit	2020-05-08
vBulletin before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and 5.6.1 before 5.6.1pl1 has incorrect access control.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.