Description
vBulletin 是美国 InternetBrands 和 vBulletinSolutions 公司的一款基于 PHP 和 MySQL 的开源 Web 论坛程序。
vBulletin 5.x widgetConfig 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/jas502n/CVE-2019-16759
https://www.cve.org/CVERecord?id=CVE-2019-16759
https://www.rapid7.com/db/modules/exploit/multi/http/vbulletin_widgetconfig_rce/
https://avd.aliyun.com/detail?id=AVD-2019-16759
https://unit42.paloaltonetworks.com/cve-2020-17496/
https://nvd.nist.gov/vuln/detail/cve-2019-16759
https://stack.chaitin.com/vuldb/detail/a41dbdac-678e-40bb-ab45-0e608713cf21
https://gryffinbit.top/2022/11/15/vBulletin-5-x-RCE%EF%BC%88CVE-2019-16759%EF%BC%89%E5%A4%8D%E7%8E%B0%E5%8F%8A%E6%B5%81%E9%87%8F%E5%88%86%E6%9E%90/
https://blog.nsfocus.net/vbulletin-5-rce-vulnerability/
https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/vBulletin/%EF%BC%88CVE-2019-16759%EF%BC%89vBulletin%205.x%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E/
https://www.exploit-db.com/exploits/47437
https://www.4hou.com/posts/o7kj
https://cloud.tencent.com/developer/article/1554919
https://www.secpod.com/blog/vbulletin-remote-code-execution-vulnerability-cve-2019-16759
https://medium.com/@sucuri_security/zero-day-rce-in-vbulletin-v5-0-0-v5-5-4-d2e548b7d45a
https://threatprotect.qualys.com/2019/10/10/vbulletin-remote-code-execution-vulnerability/
https://www.sonicwall.com/blog/cve-2020-17496-vbulletin-rce-vulnerability-actively-being-exploited-in-the-wild
https://thehackernews.com/2020/08/vBulletin-vulnerability-exploit.html
https://beaglesecurity.com/blog/vulnerability/oday-rce-in-vbulletin-fix-bypass.html