CVE-2013-3522: vBulletin

Medium severity, CVSS 6.5. EPSS: 27.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in index.php/ajax/api/reputation/vote in vBulletin 5.0.0 Beta 11, 5.0.0 Beta 28, and earlier allows remote authenticated users to execute arbitrary SQL commands via the nodeid parameter.

Affected products

• vBulletin vBulletin: version 5.0.0 only

Published 2013-05-10. Last modified 2026-06-16.