cve/2019/CVE-2019-17132.md

CVE-2019-17132

Description

vBulletin through 5.5.4 mishandles custom avatars.

POC

Reference

• http://packetstormsecurity.com/files/154759/vBulletin-5.5.4-Remote-Code-Execution.html
• http://seclists.org/fulldisclosure/2019/Oct/9

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/SexyBeast233/SecBooks