CVE-2019-17132 (CRITICAL 9.8) · Watchpost

← All vulnerabilities

CVE-2019-17132

CRITICAL 9.8CVE-2019-17132 · Published 04/10/2019 · updated 17/06/2026

Package	Affected versions	Patched versions
vbulletin vbulletin	`≤ 5.5.4`	No fix yet

Description

vBulletin through 5.5.4 mishandles custom avatars.

References

packetstormsecurity.com/files/154759/vBulletin-5.5.4-Remote-Code-Execution.html · Third Party Advisory
seclists.org/fulldisclosure/2019/Oct/9 · Third Party Advisory
forum.vbulletin.com/forum/vbulletin-announcements/vbulletin-announcements_aa/4423646-vbulletin-5-5-x-5-5-2-5-5-3-and-5-5-4-security-patch-level-2 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free