.. / CVE-2020-12720

• SQLi
• Nuclei
• Web

Exploit for vBulletin SQL Injection (CVE-2020-12720)

Description:

vBulletin before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and 5.6.1 before 5.6.1pl1 has incorrect access control that permits SQL injection attacks.

Nuclei Template

View the template here CVE-2020-12720.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2020/CVE-2020-12720.yaml

References: