CVE-2012-5223

CVE-2012-5223 affects vBSEO: the proc_deutf() function in includes/functions_vbseocp_abstract.php for vBSEO 3.5.0–3.6.0 and earlier allows remote code execution via the char_repl parameter, which is inserted into a regex processed by preg_replace with the eval modifier. Public sightings and explo...

vBSEO 'proc_deutf()' Remote Code Execution Vulnerability

vBSEO is prone to a remote code-execution vulnerability. Exploiting this issue will allow attackers to execute arbitrary code within the context of the affected application. vBSEO 3.5.0, 3.5.1, 3.5.2, and 3.6.0.are vulnerable; other versions may also be affected. OpenVAS Vulnerability Test $Id:...

vBSEO proc_deutf() Remote PHP Code Injection

This module exploits a vulnerability in the 'procdeutf' function defined in /includes/functionsvbseocpabstract.php for vBSEO versions 3.6.0 and earlier. User input passed through 'charrepl' POST parameter isn't properly sanitized before being used in a call to pregreplace function which uses the...