vBSEO proc_deutf RCE (CVE-2012-5223)

Exploits CVE-2012-5223 eval injection in vBSEO via charrepl POST to vbseocp.php with base64 PHP in the Code header. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """vBSEO procdeutf eval RCE CVE-2012-5223 — execute session.""" from future import annotations import...

vBSEO - proc_deutf RCE Detection (CVE-2012-5223)

Detects CVE-2012-5223 by POSTing charrepl eval payload to /vbseocp.php with Code: base64passthru"id". !/usr/bin/env python3 -- coding: utf-8 -- """vBSEO procdeutf eval RCE CVE-2012-5223.""" import base64 import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

EUVD-2012-6510

Malware in sbrugna...

EUVD-2010-1109

Malware in sbrugna...

CVE-2012-6666

vBSeo before 3.6.0PL2 allows XSS via the member.php u parameter...

Design/Logic Flaw

vBSeo before 3.6.0PL2 allows XSS via the member.php u parameter...

CVE-2012-6666

CVE-2012-6666 affects vBSeo prior to 3.6.0PL2. The issue is a reflected XSS vulnerability exploitable via the member.php u parameter. The provided documents do not specify affected platforms beyond the product/version and do not include exploit code or remediation details. No additional impact or...

CVE-2012-6666

vBSeo before 3.6.0PL2 allows XSS via the member.php u parameter...

CVE-2012-6666: Improper Neutralization of Input During Web Page Generation

vBSeo before 3.6.0PL2 allows XSS via the member.php u parameter...

PT-2020-7320

Name of the Vulnerable Software and Affected Versions: vBSeo versions prior to 3.6.0PL2 Description: The issue allows for XSS attacks via the u parameter in the member.php endpoint. Recommendations: For versions prior to 3.6.0PL2, update to version 3.6.0PL2 or later to resolve the issue...

vBulletin 4.x Seo By vBSeo 3.3.2 Open Redirection

Exploit Title : vBulletin 4.x Seo by vBSeo 3.3.2 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 04/03/2019 Vendor Homepages : vbulletin.com vbseo.com Software Information Links : vbulletin-mods.com/forum/showthread.php?t=936...

vBulletin 4.2.5 vBSEO 3.6.1 Open Redirection

Exploit Title : vBulletin 4.2.5 vBSEO 3.6.1 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 28/02/2019 Vendor Homepage : vbulletin.com vbseo.com Software Information Links : vbulletin.web.tr/forumdisplay.php/49-vBulletin-seo-vBseo-dbseo...

Code injection

functionsvbseohook.php in the VBSEO module for vBulletin allows remote authenticated users to execute arbitrary code via the HTTP Referer header to visitormessage.php...

CVE-2014-9463

functionsvbseohook.php in the VBSEO module for vBulletin allows remote authenticated users to execute arbitrary code via the HTTP Referer header to visitormessage.php...

CVE-2014-9463

functionsvbseohook.php in the VBSEO module for vBulletin allows remote authenticated users to execute arbitrary code via the HTTP Referer header to visitormessage.php...

CVE-2014-9463

The CVE-2014-9463 issue concerns the VBSEO module for vBulletin, specifically the functions_vbseo_hook.php file. Multiple sources (NVD CVE entry and CNVD) describe a remote code execution vulnerability triggered by a crafted HTTP Referer header directed at visitormessage.php, allowing remoteAuthe...

PT-2017-6352

Name of the Vulnerable Software and Affected Versions vBulletin VBSEO module affected versions not specified Description The issue allows remote authenticated users to execute arbitrary code via the HTTP Referer header to visitormessage.php. This is due to a problem in the functions vbseo hook.ph...

CVE-2014-9463: Improper Control of Generation of Code

functionsvbseohook.php in the VBSEO module for vBulletin allows remote authenticated users to execute arbitrary code via the HTTP Referer header to visitormessage.php...

vBSEO 3.6.0 functions_vbseo_hook.php Referer RCE

Remote command execution vulnerability in vBSEO functionsvbseohook.php Referer Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Vulnerability alert: well-known Forum system vBulletin commonly used SEO plugin VBSEO there is a serious security vulnerability-vulnerability warning-the black bar safety net

vBulletin team recently to all their customers warning of its plug-in VBSEO there was a serious security vulnerability. VBSEO for vBulletin and very popular third party seo modules, worst of VBSEO official already in the last year to stop updating this plug-in, that no one can exploit to provide...