EDB-38790

functional

vBulletin 5.x - Remote Code Execution

view exploit source exploit_dbverifiedtype webappsauthor Mohammad Reza Esparghampublished 2015-11-23catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2015-7808UShigh7.5Exploit
The vB_Api_Hook::decodeArguments method in vBulletin 5 Connect 5.1.2 through 5.1.9 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code vi…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan