2 matches found
vBulletin_5.x-tab_panel-RCE
vBulletin5.x-tabpanel-RCE CVE-2020-17496 is a vulnerability in vBulletin’s ajax/render/widgetphp route by injecting malicious code via the widgetConfig parameter. Affected System vBulletin 5.5.4 5.6.2 vBulletin 5.x Widgettabbedcontainertabpanel RCE Vuln Test script Usage python...
9.8CVSS9.2AI score0.87478EPSS
SaveExploits2
PT-2026-64909
Name of the Vulnerable Software and Affected Versions vBulletin versions 5.x through 5.7.5 vBulletin versions 6.x through 6.2.1 Description An eval injection issue exists in the vB5 Template Runtime::runMaths method within the template runtime. This occurs because the method processes expressions...
9.8CVSS6.7AI score0.05607EPSS
SaveExploits10References24
20