CVE-2014-9463 in vBulletin
Summary
functions_vbseo_hook.php in the VBSEO module for vBulletin allows remote authenticated users to execute arbitrary code via the HTTP Referer header to visitormessage.php.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
01/02/2015
Disclosure
09/15/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 69249 | vBulletin visitormessage.php code injection | 94 | High | Unavailable | CVE-2014-9463 |