CVE-2019-16759
Kritik CISA KEV: Aktif İstismarTeknik Veri (Otomatik)
- CVSS Skoru
- 9.8
- EPSS
- 99.7%
- CWE
- CWE-94
- KEV Durumu
- Evet
Yayım tarihi: 24 Eylül 2019 · CISA KEV son iyileştirme tarihi: 3 Mayıs 2022
Etkilenen: vbulletin vbulletin
vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring request.
Referanslar
- http://packetstormsecurity.com/files/154623/vBulletin-5.x-0-Day-Pre-Auth-Remote-Command-Execution.html
- http://packetstormsecurity.com/files/154648/vBulletin-5.x-Pre-Auth-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/155633/vBulletin-5.5.4-Remote-Command-Execution.html
- http://packetstormsecurity.com/files/158829/vBulletin-5.x-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/158830/vBulletin-5.x-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/158866/vBulletin-5.x-Remote-Code-Execution.html
Bu CVE için henüz editoryal inceleme yapılmadı. Sadece otomatik teknik veri gösteriliyor.