| Package | Affected versions | Patched versions |
|---|---|---|
| vbulletin | ≤ 1.1.5≤ 2.0_beta_2 |
index.php in Jelsoft vBulletin does not properly initialize a PHP variable that is used to store template information, which allows remote attackers to execute arbitrary PHP code via special characters in the templatecache parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free