EDB-29512

functional

Vanilla Forums 2.0 < 2.0.18.5 - 'class.utilitycontroller.php' PHP Object Injection

view exploit source exploit_dbverifiedtype webappsauthor EgiXpublished 2013-11-08catalog exploit_db

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2013-2749US	—	—	Exploit	2013-10-13
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-3528. Reason: This candidate is a reservation duplicate of CVE-2013-3528. Notes: All CVE users should ref…
CVE-2013-3528US	high7.5	5.67% (93rd)	Exploit	2013-05-10
Unspecified vulnerability in the update check in Vanilla Forums before 2.0.18.8 has unspecified impact and remote attack vectors, related to "object injection."

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.