Description
vBSEO中的includes/functions_vbseocp_abstract.php中的proc_deutf函数中存在远程代码执行漏洞。攻击者可利用此漏洞在受影响应用程序上下文中执行任意代码。vBSEO 3.5.0版本、3.5.1版本、 3.5.2版本和 3.6.0.版本中存在漏洞，其它版本也可能受到影响。
vBSEO ‘proc_deutf()’ 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.exploit-db.com/exploits/18424
https://www.rapid7.com/db/modules/exploit/multi/http/vbseo_proc_deutf/
https://pentest-tools.com/vulnerabilities-exploits/vbseo-proc-deutf-remote-code-execution-vulnerability_8460
https://nvd.nist.gov/vuln/detail/CVE-2012-5223
https://www.invicti.com/web-application-vulnerabilities/vbseo-3-6-0-php-code-injection
https://blog.sucuri.net/2015/01/vbseos-vulnerability-leads-to-remote-code-execution.html
https://www.acunetix.com/vulnerabilities/web/vbseo-3-6-0-php-code-injection/
https://www.linuxglobal.com/vbulletin-and-vbseo-exploit-attacks-in-the-wild/