{"uuid": "03e3ae7b-bfd4-4adf-9c55-10537e03eeaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-12720", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/vbulletin_getindexablecontent_sqli.rb", "content": "{\"actions\": [{\"description\": \"Dump all tables used by vbulletin.\", \"name\": \"DumpAll\"}, {\"description\": \"Dump only user table used by vbulletin.\", \"name\": \"DumpUser\"}], \"aliases\": [], \"arch\": \"\", \"author\": [\"Charles Fol \", \"Zenofex \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a SQL injection vulnerability found in vBulletin 5.x.x to dump the user\\n          table information or to dump all of the vBulletin tables (based on the selected options). This\\n          module has been tested successfully on VBulletin Version 5.6.1 on Ubuntu Linux.\", \"disclosure_date\": \"2020-03-12\", \"fullname\": \"auxiliary/gather/vbulletin_getindexablecontent_sqli\", \"is_install_path\": true, \"mod_time\": \"2024-01-07 15:02:53 +0000\", \"name\": \"vBulletin /ajax/api/content_infraction/getIndexableContent nodeid Parameter SQL Injection\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/gather/vbulletin_getindexablecontent_sqli.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"gather/vbulletin_getindexablecontent_sqli\", \"references\": [\"CVE-2020-12720\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:22.980959Z"}