漏洞描述
Gimmie vBulletin是Gimmie开源的一个论坛插件。 Gimmie vBulletin 1.2.2版本存在SQL注入漏洞，该漏洞源于文件trigger_ratethread.php的未知函数存在问题，对参数t/postusername的操作会导致sql注入。
Gimmie vBulletin SQL注入漏洞
PoC代码
暂无相关漏洞推荐
- CVE-2019-16759: vBulletin v5.0.0-v5.5.4 Remote Command Execution
- POC CVE-2016-6195: vBulletin <= 4.2.3 - SQL Injection
- POC CVE-2018-6200: vBulletin - Open Redirect
- POC CVE-2019-16759: vBulletin 5.0.0-5.5.4 - Remote Command Execution
- POC CVE-2020-12720: vBulletin SQL Injection
- POC CVE-2020-17496: vBulletin 5.5.4 - 5.6.2- Remote Command Execution
- POC CVE-2023-25135: vBulletin <= 5.6.9 - Pre-authentication Remote Code Execution
- POC CVE-2025-48827: vBulletin 5.0.0-6.0.3 - Authentication Bypass
- POC CVE-2025-48828: vBulletin replaceAdTemplate - Remote Code Execution
- POC vbulletin-ajaxreg-sqli: vBulletin 3.x / 4.x AjaxReg - SQL Injection
- POC vbulletin-backdoor: vBulletin Backdoor - Detect
- POC vbulletin-search-sqli: vBulletin `Search.php` - SQL Injection
- vBulletin replaceAdTemplate 存在远程代码执行漏洞（CVE-2025-48828）