vBSEO Sitemap 2.5 & 3.0 - Multiple Vulnerabilities

No description provided by source. vBSEO Sitemap - Multiple Vulnerabilities Versions Affected: 2.5 and 3.0 Most likely all versions Info: A proven success record, vBSEO powers the most optimized forums on the Web. The 1 SEO plugin and the only professional, fully supported solution. A full packag...

vBSEO <= 3.6.0 "proc_deutf()" Remote PHP Code Injection Exploit

No description provided by source. require 'msf/core' class Metasploit3 Msf::Exploit::Remote include Msf::Exploit::Remote::HttpClient def initializeinfo = superupdateinfoinfo, 'Name' = 'vBSEO = 3.6.0 procdeutf Remote PHP Code Injection', 'Description' = %q This module exploits a vulnerability in...

vBulletin vBSEO 3.2.0 / 3.6.0 Cross Site Scripting

Exploit Title : Cross Site Scripting XSS - Stored vulnerability in vBulletin SEO Plugin vBSEO. Found By : Yogesh Jaygadkar | http://www.jaygadkar.com/ Tested versions : vBSEO 3.2.0 & vBSEO 3.6.0 Tested with : vBulletin 4.0.6 & vBulletin 4.2.1 Vulnerable POST Parameter : sendtrackbacks Greetz to :...

vBSEO Remote PHP Code Injection (CVE-2012-5223)

A Remote PHP Code Injection has been reported in vBSEO...

CVE-2012-5223

The procdeutf function in includes/functionsvbseocpabstract.php in vBSEO 3.5.0, 3.5.1, 3.5.2, 3.6.0, and earlier allows remote attackers to insert and execute arbitrary PHP code via "complex curly syntax" in the charrepl parameter, which is inserted into a regular expression that is processed by...

CVE-2012-5223

The procdeutf function in includes/functionsvbseocpabstract.php in vBSEO 3.5.0, 3.5.1, 3.5.2, 3.6.0, and earlier allows remote attackers to insert and execute arbitrary PHP code via "complex curly syntax" in the charrepl parameter, which is inserted into a regular expression that is processed by...

Code injection

The procdeutf function in includes/functionsvbseocpabstract.php in vBSEO 3.5.0, 3.5.1, 3.5.2, 3.6.0, and earlier allows remote attackers to insert and execute arbitrary PHP code via "complex curly syntax" in the charrepl parameter, which is inserted into a regular expression that is processed by...

CVE-2012-5223

The procdeutf function in includes/functionsvbseocpabstract.php in vBSEO 3.5.0, 3.5.1, 3.5.2, 3.6.0, and earlier allows remote attackers to insert and execute arbitrary PHP code via "complex curly syntax" in the charrepl parameter, which is inserted into a regular expression that is processed by...

CVE-2012-5223

CVE-2012-5223 affects vBSEO: the proc_deutf() function in includes/functions_vbseocp_abstract.php for vBSEO 3.5.0–3.6.0 and earlier allows remote code execution via the char_repl parameter, which is inserted into a regex processed by preg_replace with the eval modifier. Public sightings and explo...

CVE-2012-5223: Improper Control of Generation of Code

The procdeutf function in includes/functionsvbseocpabstract.php in vBSEO 3.5.0, 3.5.1, 3.5.2, 3.6.0, and earlier allows remote attackers to insert and execute arbitrary PHP code via "complex curly syntax" in the charrepl parameter, which is inserted into a regular expression that is processed by...

PT-2012-5835

Name of the Vulnerable Software and Affected Versions vBSEO versions 3.5.0 through 3.6.0 and earlier Description The issue allows remote attackers to insert and execute arbitrary PHP code via "complex curly syntax" in the char repl parameter. This parameter is inserted into a regular expression...

vBSEO - u Cross-Site Scripting

vBSEO - u Cross-Site Scripting source: https://www.securityfocus.com/bid/55908/info vBSEO is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user ...

vBSEO - 'u' Cross-Site Scripting

source: https://www.securityfocus.com/bid/55908/info vBSEO is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected...

VBSEO SQL Injection

VBSEO vbseo.phpaids SQL Injection Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

vBSEO 3.6.0 PHP Code Injection

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'vBSEO %q This...

vBSEO 3.6.0 RCE

Remote command execution vulnerability in vBSEO procdeutf Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

vBSEO 'proc_deutf()' RCE Vulnerability - Active Check

vBSEO is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vbulletin:vbulletin"...

vBSEO 'proc_deutf()' Remote Code Execution Vulnerability

vBSEO is prone to a remote code-execution vulnerability. Exploiting this issue will allow attackers to execute arbitrary code within the context of the affected application. vBSEO 3.5.0, 3.5.1, 3.5.2, and 3.6.0.are vulnerable; other versions may also be affected. OpenVAS Vulnerability Test $Id:...

vBSEO <= 3.6.0 "proc_deutf()" Remote PHP Code Injection Exploit

Exploit for php platform in category web applications require 'msf/core' class Metasploit3 'vBSEO %q This module exploits a vulnerability in the 'procdeutf' function defined in /includes/functionsvbseocpabstract.php. User input passed through 'charrepl' POST parameter isn't properly sanitized...

vBSEO 3.6.0 - 'proc_deutf()' Remote PHP Code Injection (Metasploit)

require 'msf/core' class Metasploit3 'vBSEO %q This module exploits a vulnerability in the 'procdeutf' function defined in /includes/functionsvbseocpabstract.php. User input passed through 'charrepl' POST parameter isn't properly sanitized before being used in a call to pregreplace function which...