| Package | Affected versions | Patched versions |
|---|---|---|
| vbulletin | ≤ 5.2.6 |
In vBulletin before 5.3.0, remote attackers can bypass the CVE-2016-6483 patch and conduct SSRF attacks by leveraging the behavior of the PHP parse_url function, aka VBV-17037.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free