Vbulletin Luki w zabezpieczeniach

Oś czasu

Wersja

2.2.0	14
3.0 Beta 2	13
3.0.1	13
2.2.1	13
2.2.2	13

Przeciwdziałanie

Official Fix	35
Temporary Fix	0
Workaround	1
Unavailable	15
Not Defined	61

Wykorzystywanie

High	27
Functional	0
Proof-of-Concept	20
Unproven	2
Not Defined	63

Wektor dostępu

Not Defined	0
Physical	0
Local	1
Adjacent	0
Network	111

Uwierzytelnianie

Not Defined	0
High	11
Low	20
None	81

Interakcja z użytkownikiem

Not Defined	0
Required	57
None	55

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	7
≤5	41
≤6	8
≤7	19
≤8	23
≤9	12
≤10	2

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	9
≤5	43
≤6	8
≤7	27
≤8	14
≤9	10
≤10	1

VulDB

≤1	0
≤2	0
≤3	0
≤4	18
≤5	31
≤6	6
≤7	21
≤8	29
≤9	5
≤10	2

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	12
≤6	1
≤7	5
≤8	0
≤9	3
≤10	8

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	16
<2k	51
<5k	43
<10k	0
<25k	1
<50k	1
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	112
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (150): 1.0.1, 1.1.5, 2.0, 2.0 Beta 2, 2.0 Beta 3, 2.0 Rc2, 2.0 Rc3, 2.0.1, 2.0.2, 2.0.3, 2.1.9, 2.2, 2.2.1, 2.2.2, 2.2.3, 2.2.4, 2.2.5, 2.2.6, 2.2.7, 2.2.8, 2.2.9, 2.2.9 Can, 2.3, 2.3.2, 2.3.3, 2.3.4, 2.3.8, 3, 3.0, 3.0 Beta 2, 3.0 Beta 3, 3.0 Beta 4, 3.0 Beta 5, 3.0 Beta 6, 3.0 Beta 7, 3.0 Gamma, 3.0.0 Beta 2, 3.0.0 Can4, 3.0.0 Rc4, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.12, 3.5, 3.5.0 Beta 1, 3.5.0 Beta 2, 3.5.0 Beta 3, 3.5.0 Beta 4, 3.5.0 Rc1, 3.5.0 Rc2, 3.5.0 Rc3, 3.5.1, 3.5.2, 3.5.3, 3.5.4, 3.5.8, 3.6, 3.6.1, 3.6.2, 3.6.3, 3.6.4, 3.6.5, 3.6.6, 3.6.7, 3.6.8, 3.6.9, 3.7, 3.7.1, 3.7.2, 3.7.3, 3.7.4, 3.8.7, 4, 4.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5, 4.0.6, 4.0.7, 4.0.8, 4.1, 4.1.1, 4.1.2, 4.1.3, 4.1.4, 4.1.5, 4.1.6, 4.1.7, 4.1.8, 4.1.9, 4.1.11, 4.1.12, 4.2, 4.2.1, 4.2.2, 4.2.2 PL4, 4.2.3, 4.2.4, 4.4.2, 5, 5.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.1, 5.1.1, 5.1.1 Alpha 9, 5.1.2, 5.1.3, 5.1.4, 5.1.5, 5.1.6, 5.1.7, 5.1.8, 5.1.9, 5.2, 5.2.1, 5.2.2, 5.3, 5.4, 5.4.3, 5.5, 5.5.1, 5.5.2, 5.5.3, 5.5.4, 5.5.5, 5.5.6, 5.6, 5.6.1, 5.6.2, 5.6.3, 5.6.4, 5.6.5, 5.6.6, 5.6.7, 5.6.8, 5.6.9, 5.7.5, 6

Typ oprogramowania: Forum Software

Opublikowano	Base	Temp	Słaby punkt	0day	Dzisiaj	Wyk	Prz	CTI	CVE
2023-09-16	4.4	4.4	vBulletin Admin Control Panel cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2023-39777
2023-02-03	8.5	8.4	vBulletin HTTP Request verify_serialized privilege escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2023-25135
2020-11-01	8.0	8.0	vBulletin subWidgets Data widget_tabbedcontainer_tab_panel privilege escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2020-7373
2020-09-03	4.1	4.1	vBulletin attachment.php&do=rebuild&type cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	CVE-2020-25124
2020-09-03	4.1	4.1	vBulletin Admin CP cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2020-25123
2020-09-03	4.1	4.1	vBulletin Admin CP cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2020-25122
2020-09-03	4.1	4.1	vBulletin Admin CP cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2020-25121
2020-09-03	4.1	4.1	vBulletin Admin CP cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2020-25120
2020-09-03	4.1	4.1	vBulletin Admin CP cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2020-25119
2020-09-03	4.1	4.1	vBulletin Admin CP cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2020-25118
2020-09-03	4.1	4.1	vBulletin Admin CP cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2020-25117
2020-09-03	4.1	4.1	vBulletin Admin CP cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2020-25116
2020-09-03	4.1	4.1	vBulletin Admin CP cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2020-25115
2020-08-12	8.5	8.5	vBulletin Incomplete Fix CVE-2019-16759 widget_tabbedcontainer_tab_panel privilege escalation	$0-$5k	$0-$5k	High	Not Defined	0.00	CVE-2020-17496
2020-05-08	8.5	8.2	vBulletin Access Control privilege escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-12720
2019-10-08	4.8	4.8	vBulletin getHookList sql injection	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2019-17271
2019-10-04	8.5	8.5	vBulletin Avatar privilege escalation	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2019-17132
2019-10-04	5.3	5.2	vBulletin privilege escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2019-17131
2019-10-04	6.5	6.5	vBulletin URL vurl.php privilege escalation	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	CVE-2019-17130
2019-09-24	8.5	8.5	vBulletin widget_php privilege escalation	$0-$5k	$0-$5k	High	Not Defined	0.05	CVE-2019-16759
2018-10-17	6.6	6.6	vBulletin Redirect	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2018-15493
2018-01-25	6.6	6.6	vBulletin redirector.php Redirect	$0-$5k	$0-$5k	Not Defined	Not Defined	0.07	CVE-2018-6200
2017-12-14	8.5	8.1	vBulletin cacheTemplates unserialize privilege escalation	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00	CVE-2017-17672
2017-12-14	8.1	8.1	vBulletin directory traversal	$0-$5k	$0-$5k	High	Not Defined	0.00	CVE-2017-17671
2017-09-19	6.4	6.4	vBulletin Private Message privilege escalation	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	CVE-2015-3419