PT-2006-5081 · Vbulletin · Vbulletin

Name of the Vulnerable Software and Affected Versions: vBulletin version 3.5.4 Description: A remote file inclusion issue in the install/upgrade 301.php file allows remote attackers to execute arbitrary PHP code via a URL in the step parameter. However, the vendor has disputed this issue, stating...