vBulletin widget_php RCE (CVE-2019-16759)

Exploits CVE-2019-16759 in vBulletin 5.0.0–5.5.4 via unauthenticated ajax/render/widgettabbedcontainertabpanel widgetphp template injection. !/usr/bin/env python3 -- coding: utf-8 -- """vBulletin widgetphp RCE CVE-2019-16759.""" import hashlib import re import urllib.parse from kittysploit import...

vBulletin 5.5.4 - 5.6.2- Remote Command Execution Detection

vBulletin versions 5.5.4 through 5.6.2 allow remote command execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759. !/usr/bin/env python3 -- coding: utf-8 -- """vBulletin versions 5."""...

Design/Logic Flaw

vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759. ALSO NOTE: CVE-2020-7373 is a duplicate of CVE-2020-17496. CVE-2020-17496 is...

CVE-2020-7373: Improper Control of Generation of Code

vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759. ALSO NOTE: CVE-2020-7373 is a duplicate of CVE-2020-17496. CVE-2020-17496 is...

CVE-2020-17496: Improper Neutralization of Special Elements in Output Used by a Downstream Component

vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759...