Design/Logic Flaw

vBulletin through 5.5.4 mishandles external URLs within the /core/vb/vurl.php file and the /core/vb/vurl directories...

CVE-2019-17130

CVE-2019-17130 affects vBulletin up to version 5.5.4. The vulnerability is due to mishandling of external URLs in /core/vb/vurl.php and the /core/vb/vurl directories, enabling potential issues with URL handling. Connected sources corroborate the same affected product/version range and describe th...

PT-2019-14963

Name of the Vulnerable Software and Affected Versions vBulletin versions prior to 5.5.5 Description The issue arises from the mishandling of external URLs within the /core/vb/vurl.php file and the /core/vb/vurl directories. Recommendations For versions prior to 5.5.5, update to version 5.5.5 or...

CVE-2019-17130: Files or Directories Accessible to External Parties

vBulletin through 5.5.4 mishandles external URLs within the /core/vb/vurl.php file and the /core/vb/vurl directories...