CVE-2019-17132

Description

References

• packetstormsecurity.com/files/154759/vBulletin-5.5.4-Remote-Code-Execution.html · Third Party Advisory
• seclists.org/fulldisclosure/2019/Oct/9 · Third Party Advisory
• forum.vbulletin.com/forum/vbulletin-announcements/vbulletin-announcements_aa/4423646-vbulletin-5-5-x-5-5-2-5-5-3-and-5-5-4-security-patch-level-2 · Vendor Advisory

vbulletin 的其他漏洞

• CVE-2025-46171中危 5.4vBulletin 3.8.7 is vulnerable to a denial-of-service condition via the misc.php?do=buddylist endpoint. If an authenticated user has a suffic…
• CVE-2025-48828高危 8.1Certain vBulletin versions might allow attackers to execute arbitrary PHP code by abusing Template Conditionals in the template engine. By c…
• CVE-2025-48827严重 9.8vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke protected API controllers' methods when running…
• CVE-2023-39777中危 5.4A cross-site scripting (XSS) vulnerability in the Admin Control Panel of vBulletin 5.7.5 and 6.0.0 allows attackers to execute arbitrary web…
• CVE-2023-25135严重 9.8vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP request that triggers dese…