.. / CVE-2016-6195

• SQLi
• Nuclei
• Web

Exploit for vBulletin <= 4.2.3 - SQL Injection (CVE-2016-6195)

Description:

vBulletin versions 3.6.0 through 4.2.3 are vulnerable to an SQL injection vulnerability in the vBulletin core forumrunner addon. The vulnerability allows an attacker to execute arbitrary SQL queries and potentially access sensitive information from the database.

Nuclei Template

View the template here CVE-2016-6195.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2016/CVE-2016-6195.yaml

References: