CVE-2020-12720

概要

参考情報

• packetstormsecurity.com/files/157716/vBulletin-5.6.1-SQL-Injection.html · Third Party Advisory
• packetstormsecurity.com/files/157904/vBulletin-5.6.1-SQL-Injection.html · Third Party Advisory
• attackerkb.com/topics/RSDAFLik92/cve-2020-12720-vbulletin-incorrect-access-control · Third Party Advisory
• forum.vbulletin.com/forum/vbulletin-announcements/vbulletin-announcements_aa/4440032-vbulletin-5-6-1-security-patch-level-1 · Vendor Advisory

vbulletin のその他の脆弱性

• CVE-2025-46171中 5.4vBulletin 3.8.7 is vulnerable to a denial-of-service condition via the misc.php?do=buddylist endpoint. If an authenticated user has a suffic…
• CVE-2025-48828高 8.1Certain vBulletin versions might allow attackers to execute arbitrary PHP code by abusing Template Conditionals in the template engine. By c…
• CVE-2025-48827緊急 9.8vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke protected API controllers' methods when running…
• CVE-2023-39777中 5.4A cross-site scripting (XSS) vulnerability in the Admin Control Panel of vBulletin 5.7.5 and 6.0.0 allows attackers to execute arbitrary web…
• CVE-2023-25135緊急 9.8vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP request that triggers dese…