2019-09-24 22:00:52 +00:00
{
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org" ,
"ID" : "CVE-2019-16759" ,
"STATE" : "PUBLIC"
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "n/a" ,
"version" : {
"version_data" : [
{
"version_value" : "n/a"
}
]
}
}
]
} ,
"vendor_name" : "n/a"
}
]
}
} ,
"data_format" : "MITRE" ,
"data_type" : "CVE" ,
"data_version" : "4.0" ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
"value" : "vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring request."
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "n/a"
}
]
}
]
} ,
"references" : {
"reference_data" : [
{
"url" : "https://seclists.org/fulldisclosure/2019/Sep/31" ,
"refsource" : "MISC" ,
"name" : "https://seclists.org/fulldisclosure/2019/Sep/31"
2019-09-25 12:01:06 +00:00
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.theregister.co.uk/2019/09/24/vbulletin_vbug_zeroday/" ,
"url" : "https://www.theregister.co.uk/2019/09/24/vbulletin_vbug_zeroday/"
2019-09-26 02:00:52 +00:00
} ,
{
"refsource" : "MISC" ,
"name" : "https://arstechnica.com/information-technology/2019/09/public-exploit-code-spawns-mass-attacks-against-high-severity-vbulletin-bug/" ,
"url" : "https://arstechnica.com/information-technology/2019/09/public-exploit-code-spawns-mass-attacks-against-high-severity-vbulletin-bug/"
2019-09-26 19:00:59 +00:00
} ,
{
"refsource" : "MISC" ,
"name" : "http://packetstormsecurity.com/files/154623/vBulletin-5.x-0-Day-Pre-Auth-Remote-Command-Execution.html" ,
"url" : "http://packetstormsecurity.com/files/154623/vBulletin-5.x-0-Day-Pre-Auth-Remote-Command-Execution.html"
2019-10-01 23:00:54 +00:00
} ,
{
"refsource" : "MISC" ,
"name" : "http://packetstormsecurity.com/files/154648/vBulletin-5.x-Pre-Auth-Remote-Code-Execution.html" ,
"url" : "http://packetstormsecurity.com/files/154648/vBulletin-5.x-Pre-Auth-Remote-Code-Execution.html"
2019-12-11 02:00:59 +00:00
} ,
{
"refsource" : "MISC" ,
"name" : "http://packetstormsecurity.com/files/155633/vBulletin-5.5.4-Remote-Command-Execution.html" ,
"url" : "http://packetstormsecurity.com/files/155633/vBulletin-5.5.4-Remote-Command-Execution.html"
2020-08-11 17:01:22 +00:00
} ,
{
"refsource" : "MISC" ,
"name" : "http://packetstormsecurity.com/files/158830/vBulletin-5.x-Remote-Code-Execution.html" ,
"url" : "http://packetstormsecurity.com/files/158830/vBulletin-5.x-Remote-Code-Execution.html"
} ,
{
"refsource" : "MISC" ,
"name" : "http://packetstormsecurity.com/files/158829/vBulletin-5.x-Remote-Code-Execution.html" ,
"url" : "http://packetstormsecurity.com/files/158829/vBulletin-5.x-Remote-Code-Execution.html"
2020-08-11 22:01:25 +00:00
} ,
{
"refsource" : "FULLDISC" ,
"name" : "20200811 Remote Code Execution 0day in vBulletin 5.x" ,
"url" : "http://seclists.org/fulldisclosure/2020/Aug/5"
2020-08-13 19:01:28 +00:00
} ,
{
"refsource" : "MISC" ,
"name" : "http://packetstormsecurity.com/files/158866/vBulletin-5.x-Remote-Code-Execution.html" ,
"url" : "http://packetstormsecurity.com/files/158866/vBulletin-5.x-Remote-Code-Execution.html"
2019-09-24 22:00:52 +00:00
}
]
}
}
