[ Vendor · 4 CVEs ]
Vbulletin
CVEs affecting Vbulletin published in the last 30 days, plus any Vbulletin CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2020-17496 | 12 Aug 2020 | CVSS 9.8 | vBulletin PHP Module Remote Code ExecutionvBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widget_tabbedcontainer_tab_panel request… | ExploitedFix |
| CVE-2020-17496 | 12 Aug 2020 | CVSS 9.8 | vBulletin PHP Module Remote Code ExecutionvBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widget_tabbedcontainer_tab_panel request… | ExploitedFix |
| CVE-2019-16759 | 24 Sep 2019 | CVSS 9.8 | vBulletin PHP Module Remote Code ExecutionvBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring request. | Exploited |
| CVE-2019-16759 | 24 Sep 2019 | CVSS 9.8 | vBulletin PHP Module Remote Code ExecutionvBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring request. | Exploited |