Exploit for Easy Forms - Credible?

[ne_one]

While doing some testing with Easy Forms, I came across a few sites making reference to a private SQL injection exploit that was made available in 2014.

I haven't seen any mention of this in the mod discussion forums or elsewhere.

Anyone know if it is legit?

[blind-eddie]

Google search:
https://www.google.com/webhp?sourceid=chrome-instant&ion=1&espv=2&ie=UTF-8#q=vbulletin+Easy+Forms+exploit

[ne_one]

Google search:
https://www.google.com/webhp?sourceid=chrome-instant&ion=1&espv=2&ie=UTF-8#q=vbulletin+Easy+Forms+exploit

That would be it...

Has this been confirmed or addressed?

[Dragonsys]

That would be it...

Has this been confirmed or addressed?

well, since it hasn't been updated since 2011 and is for vb v4.1, it is very possible to be true.

[ne_one]

well, since it hasn't been updated since 2011 and is for vb v4.1, it is very possible to be true.

There are a large number of installs so I'll attempt to confirm.