PDA

Bekijk Volledige Versie : Re: Vbulletin 3.7.0 Gold >> Sql injection on faq.php


martin.meredith@vbulletin.com
21/05/08, 17:05
This is invalid. the variable q is taken, split into words, and then each word is escaped for usage within the DB.

Once again, this is invalid
Matias Blanco
21/05/08, 23:05
This exploit is valid. We've just exploted it.

VBulletin 3.7.0 Gold.

martin.meredith@vbulletin.com wrote:
> This is invalid. the variable q is taken, split into words, and then each word is escaped for usage within the DB.
>
> Once again, this is invalid
>