The Romanian Security Team (RST) is the hacktivist group from Romania that published the exploit that allows SQL injection in the latest version of the vBulletin platform.
Nytro, one of the team members, posted the exploit on his team's forum, with several details on how an attacker could access a vBulletin 5.x database.
The code and all the details are provided for free, while at the same time other groups are selling the zero-day for $2,000 in Bitcoin.
vBulletin, for its part, responded immediately and released a patch a day after the RSTs were posted on their forum.
Source: secnews.gr
📧
Subscribe to the SecNews Newsletter
