vBulletin 5.6.8

CPE Details

vBulletin 5.6.8
vbulletin
vbulletin
5.6.8
2023-02-10
15h11 +00:00
2023-07-14
12h06 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:vbulletin:vbulletin:5.6.8:-:*:*:*:*:*:*

Informations

Vendor

vbulletin

Product

vbulletin

Version

5.6.8

Update

-

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2023-39777 2023-09-15 22h00 +00:00 A cross-site scripting (XSS) vulnerability in the Admin Control Panel of vBulletin 5.7.5 and 6.0.0 allows attackers to execute arbitrary web scripts or HTML via the /login.php?do=login url parameter.
5.4
Moyen
CVE-2023-25135 2023-02-02 23h00 +00:00 vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP request that triggers deserialization. This occurs because verify_serialized checks that a value is serialized by calling unserialize and then checking for errors. The fixed versions are 5.6.7 PL1, 5.6.8 PL1, and 5.6.9 PL1.
9.8
Critique
CVE-2010-1077 2010-03-23 18h00 +00:00 Directory traversal vulnerability in vbseo.php in Crawlability vBSEO plugin 3.1.0 for vBulletin allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the vbseourl parameter.
6.8