{"cvss":0.0,"datePublished":"2013-12-11T00:00:00Z","dateUpdated":"2013-12-11T00:00:00Z","description":"SQL injection vulnerability in index.php/ajax/api/reputation/vote in vBulletin 5.0.0 Beta 11, 5.0.0 Beta 28, and earlier allows remote authenticated users to execute arbitrary SQL commands via the nodeid parameter.","dueDate":"","id":"CVE-2013-3522","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"vBulletin","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"vBulletin vBulletin Improper Neutralization of Special Elements used in an SQL Command","vendor":"vBulletin"}