corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a08793-d899-712e-aa9b-a2e490add4ba

Exploiting an N-day vBulletin PHP Object Injection Vulnerability

karmainsecurity.com · published 26 November 2022

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at karmainsecurity.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
9
Words captured
2,283

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://trends.builtwith.com/cms/forum-software
trends.builtwith.com
https://thehackernews.com/2019/09/vbulletin-zero-day-exploit.html
thehackernews.com
https://blog.exploitee.rs/2020/exploiting-vbulletin-a-tale-of-patch-fail/
blog.exploitee.rs
https://www.cvedetails.com/product/14110
cvedetails.com
https://forum.vbulletin.com/forum/vbulletin-announcements/vbulletin-announcements_aa/4418489-vbulletin-connect-5-5-3-is-now-available-for-download
forum.vbulletin.com
https://owasp.org/www-community/vulnerabilities/PHP_Object_Injection
owasp.org
https://github.com/ambionics/phpggc/blob/master/gadgetchains/Guzzle/RCE/1/gadgets.php
github.com
https://karmainsecurity.com/pocs/vbulletin-movepm-poi.php
karmainsecurity.com
https://en.wikipedia.org/wiki/File_inclusion_vulnerability
en.wikipedia.org