vBulletin_Routestring-RCE

CVE-2019-16759vBulletinRoutestring-RCE-PoC Foi descoberta uma vulnerabilidade no vBulletin que pode permitir a execução remota de código quando uma requisição POST maliciosa é enviada à aplicação vulnerável. A vulnerabilidade é causada por um erro de validação de entrada durante a análise de uma...

vBulletin PHP Module Remote Code Execution Vulnerability

The PHP module within vBulletin contains an unspecified vulnerability that allows for remote code execution via the widgetConfigcode parameter in an ajax/render/widgetphp routestring request...

VBScan 0.1.8 - Black Box vBulletin Vulnerability Scanner

OWASP VBScan short for VBulletin Vulnerability Scanner is an opensource project in perl programming language to detect VBulletin CMS vulnerabilities and analyses them . Why OWASP VBScan ? If you want to do a penetration test on a vBulletin Forum, OWASP VBScan is Your best shot ever! This Project ...

PT-2017-14947

Name of the Vulnerable Software and Affected Versions vBulletin versions prior to 5.4 Description The issue allows remote PHP code execution due to an unauthenticated request that can include directory traversal sequences to specify an arbitrary pathname. Specifically, while ../ traversal is...

vBulletin 5.x - routestring Remote Code Execution

vBulletin 5.x - routestring Remote Code Execution SSD Advisory – vBulletin routestring Unauthenticated Remote Code Execution Source: https://blogs.securiteam.com/index.php/archives/3569 Vulnerability Summary The following advisory describes a unauthenticated file inclusion vulnerability that lead...