The MKPortal vBulletin plugin versions 1.1 RC1 and prior suffer from SQL injection in index.php.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/45834/vb-MKPortal.txt
Source: https://packetstormsecurity.com/files/45834/vb-MKPortal.txt.html