{"cvss":0.0,"datePublished":"2016-08-30T00:00:00Z","dateUpdated":"2016-08-30T00:00:00Z","description":"SQL injection vulnerability in forumrunner/includes/moderation.php in vBulletin before 4.2.2 Patch Level 5 and 4.2.3 before Patch Level 1 allows remote attackers to execute arbitrary SQL commands via the postids parameter to forumrunner/request.php, as exploited in the wild in July 2016.","dueDate":"","id":"CVE-2016-6195","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"vBulletin","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"vBulletin vBulletin Improper Neutralization of Special Elements used in an SQL Command","vendor":"vBulletin"}