[ authorization ] [ registration ] [ استعادة ]
اتصل بنا
يمكنكم الاتصال بنا من خلال:
0day.today Exploits Market and 0day Exploits Database

vBulletin 5.5.2 PHP Object Injection Exploit

[ 0Day-ID-38084 ]
العنوان الكامل
vBulletin 5.5.2 PHP Object Injection Exploit [ Highlight ]
Highlight - is paid service, that can help to get more visitors to your material.

Price:
تاريخ الإضافة
الصنف
المنصة
تم التحقق
السعر
مجاني
الخطر
[
Security Risk Critical
]
Rel. releases
الوصف
vBulletin versions 5.5.2 and below suffers from an issue where user input passed through the "messageids" request parameter to /ajax/api/vb4_private/movepm is not properly sanitized before being used in a call to the unserialize() PHP function. This can be exploited by malicious users to inject arbitrary PHP objects into the application scope, allowing them to carry out a variety of attacks, such as executing arbitrary PHP code.
Other Information
Abuses
0
التعليقات
0
المشاهدات
3 642
We DO NOT use Telegram or any messengers / social networks! We DO NOT use Telegram or any messengers / social networks! Please, beware of scammers!
مجاني
Open Exploit
You can open this source code for free
Open Exploit
Open Exploit
You can open this source code for free
Verified by
Verified by
This material is checked by Administration and absolutely workable.
المؤلف
BL
29
الثغرات
129
القراء
2
[ التعليقات: 0 ]
Terms of use of comments:
  • Users are forbidden to exchange personal contact details
  • Haggle on other sites\projects is forbidden
  • Reselling is forbidden
Punishment: permanent block of user account with all Gold.

قم بالدخوال أو التسجيل لتكتب تعليق