[Forum] 2 Security Vulns Issues - Publishing Suite 4.1.7 combined is Unauth SQL Injection

[mlitchfield]

There exists two seperate security issues within vBulletin Publishing suite. These issues were tested against Version 4.1.7

The first vuln allows for unauthenticated editing of vBulletin Content

The second is a SQL Injection attack, that would normally require CMS Admin rights to access. However, because of vulnerability (1) above, we can use both attacks combined to launch an unauthenticated SQL Injection attack against the vBulletin database

If you are just using the Classic Forum, and NOT the publishing suite. You are not vulnerable to these attacks.

Can someone point me to the email address for the security team.

Thanks in advance

Mark

[mlitchfield]

Example

https://www.vbulletin.com/forum/content.php/667-mlitchfield

Before this was a simple Test page from Home page.

I will change it back to Test shortly

[Wayne Luke]

Please post the details here:

http://tracker.vbulletin.com/secure/CreateIssue.jspa?pid=10020&issuetype=1

For privacy please choose Private. You'll still be able to see the issue and provide feedback if needed.

[mlitchfield]

Issue now posted as requested

[Wayne Luke]

Thank you. The issue is being reviewed.