CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-08-12
vBulletin 5.5.4 - 5.6.2 Remote Code Execution (RCE) Vulnerability (CVE-2020-17496)
[Affected Scope] vBulletin versions 5.5.4 through 5.6.2
[Impact] Unauthenticated remote attackers can execute arbitrary PHP code and system commands on the target server via crafted HTTP requests
[Mitigation] Apply the official security patches immediately or restrict access to the vulnerable PHP template rendering module