H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2021-11-03
Last seen2021-11-03

Confidence

—

The PHP module within vBulletin contains an unspecified vulnerability that allows for remote code execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring request.

Labels

exploitedkev

CISA KEV context

Vendor / productvBulletin vBulletin
Added2021-11-03
Due date2022-05-03
4 recorded

Relationships

mitigatesMitigation
related-toTechnique
2 external

References

nvd
CVE-2019-16759
open
cwe
CWE-94
open