| Package | Affected versions | Patched versions |
|---|---|---|
| vbulletin | = 4.1= 5.0.0 |
The install/upgrade.php scripts in vBulletin 4.1 and 5 allow remote attackers to create administrative accounts via the customerid, htmldata[password], htmldata[confirmpassword], and htmldata[email] parameters, as exploited in the wild in October 2013.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free