Security vBulletin 4.2.3 SQL Injection November 11, 2016 007admin Leave a comment vBulletin versions 4.2.3 and below suffer from a remote SQL injection vulnerability in the forumrunner add-on.