0day.today - Biggest Exploit Database in the World.

Select your language:

Things you should know about 0day.today:

We use one main domain: http://0day.today
Most of the materials is completely FREE
If you want to purchase the exploit / get V.I.P. access or pay for any other service,
you need to buy or earn GOLD

We accept currencies: [contact admin to find more]

We don't want you to use our site as a tool for hacking purposes, so any kind of action that could affect illegaly other users or websites that you don't have right to access will be banned and your account including your data will be destroyed.

Administration of this site uses the official contacts. Beware of impostors!

We DO NOT use Telegram or any messengers / social networks!
Please, beware of scammers!

I am registered user of 0day.today. I don't want to see this screen in future.

What to do first?

Read the [ agreement ]
Read the [ Submit ] rules
Visit the [ faq ] page
[ Register ] profile
Get [ GOLD ]
If you want to [ sell ]
If you want to [ buy ]
If you lost [ Account ]
Any questions [ admin@0day.today ]

Main links

You can contact us by

Mail:

mr.inj3ct0r@gmail.com

Facebook:

Inj3ct0rs

Twitter:

Inj3ct0r

Telegram:

We DO NOT use Telegram or any messengers / social networks!

[ authorization ] [ registration ] [ restore account ]

You can contact us by:

Mail:

mr.inj3ct0r@gmail.com

Facebook:

Inj3ct0rs

Twitter:

Inj3ct0r

Telegram:

We DO NOT use Telegram or any messengers / social networks!

VBulletin 5.0 all beta Automated SQL Injection and data extractor

[ 0Day-ID-20652 ]

Full title

VBulletin 5.0 all beta Automated SQL Injection and data extractor [ Highlight ]

Highlight - is paid service, that can help to get more visitors to your material.

Price:

Date add

14-04-2013

Category

web applications

Platform

php

Verified

Price

0.005 BTC

400 USD

Risk

[

Security Risk High

]

Rel. releases

Description

This is automated injector to exploit and extract all data whatever we want from target website using Vbulletin 5.0 all beta with SQLi vulnerability..
Vulnerability Credit : 0x0a
still there is no CVE or patch. On this moment vBulletin 5.0.0 beta 28 is the last version and it is affected with it.

It is so irritating to do manual injection of this vulnerability & extracting data with it manually is a lot and lot time taking. So, this does everything for you automatically..

Material is available in two type :

1. EXE ( windows supported only ) - price $80

2. Python File ( Multi-Platform Supported ) - price $180

Check video to know, how it works. Tool work is demonstrated after 18 mins in video.

Proof Images :

http://s9.postimg.org/w2yeawltb/vb1.png
http://s16.postimg.org/gllvgd31x/vb2.png
http://s22.postimg.org/bvbfu8vrl/vb3.png

Vendor

http://www.vbulletin.com

Affected ver

vBulletin 5.0 all Beta 28 ( < is last released by Vb )

Tested on

5.0 Beta 26, 5.0 Beta 28

Solution

No patch still from Vendor

CVE

CWE

it does not exist

Tags