CVE-2015-7808

The vB_Api_Hook::decodeArguments method in vBulletin 5 Connect 5.1.2 through 5.1.9 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object in the arguments parameter to ajax/api/hook/decodeArguments.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://blog.checkpoint.com/2015/11/05/check-point-discovers-critical-vbulletin-0-day/	Exploit
http://packetstormsecurity.com/files/134331/vBulletin-5.1.2-Unserialize-Code-Execution.html	Exploit
http://pastie.org/pastes/10527766/text?key=wq1hgkcj4afb9ipqzllsq	Exploit
http://www.rapid7.com/db/modules/exploit/multi/http/vbulletin_unserialize	Exploit
https://blog.sucuri.net/2015/11/vbulletin-exploits-in-the-wild.html	Exploit
https://www.exploit-db.com/exploits/38629/	Exploit
http://blog.checkpoint.com/2015/11/05/check-point-discovers-critical-vbulletin-0-day/	Exploit
http://packetstormsecurity.com/files/134331/vBulletin-5.1.2-Unserialize-Code-Execution.html	Exploit
http://pastie.org/pastes/10527766/text?key=wq1hgkcj4afb9ipqzllsq	Exploit
http://www.rapid7.com/db/modules/exploit/multi/http/vbulletin_unserialize	Exploit
https://blog.sucuri.net/2015/11/vbulletin-exploits-in-the-wild.html	Exploit
https://www.exploit-db.com/exploits/38629/	Exploit

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:vbulletin:vbulletin:5.0.0:::::::*
	cpe:2.3:a:vbulletin:vbulletin:5.0.1:::::::*
	cpe:2.3:a:vbulletin:vbulletin:5.0.2:::::::*
	cpe:2.3:a:vbulletin:vbulletin:5.0.3:::::::*
	cpe:2.3:a:vbulletin:vbulletin:5.0.4:::::::*
	cpe:2.3:a:vbulletin:vbulletin:5.0.5:::::::*
	cpe:2.3:a:vbulletin:vbulletin:5.1.0:::::::*
	cpe:2.3:a:vbulletin:vbulletin:5.1.0:rc1::::::
	cpe:2.3:a:vbulletin:vbulletin:5.1.1:::::::*
	cpe:2.3:a:vbulletin:vbulletin:5.1.2:::::::*
	cpe:2.3:a:vbulletin:vbulletin:5.1.2:beta1::::::
	cpe:2.3:a:vbulletin:vbulletin:5.1.2:rc1::::::
	cpe:2.3:a:vbulletin:vbulletin:5.1.2:rc2::::::
	cpe:2.3:a:vbulletin:vbulletin:5.1.3:::::::*
	cpe:2.3:a:vbulletin:vbulletin:5.1.3:alpha5::::::
	cpe:2.3:a:vbulletin:vbulletin:5.1.4:::::::*
	cpe:2.3:a:vbulletin:vbulletin:5.1.5:::::::*
	cpe:2.3:a:vbulletin:vbulletin:5.1.6:::::::*
	cpe:2.3:a:vbulletin:vbulletin:5.1.7:::::::*
	cpe:2.3:a:vbulletin:vbulletin:5.1.8:::::::*
	cpe:2.3:a:vbulletin:vbulletin:5.1.9:::::::*

History

21 Nov 2024, 02:37

Type	Values Removed	Values Added
References	~~() http://blog.checkpoint.com/2015/11/05/check-point-discovers-critical-vbulletin-0-day/ - Exploit~~	() http://blog.checkpoint.com/2015/11/05/check-point-discovers-critical-vbulletin-0-day/ - Exploit
References	~~() http://packetstormsecurity.com/files/134331/vBulletin-5.1.2-Unserialize-Code-Execution.html - Exploit~~	() http://packetstormsecurity.com/files/134331/vBulletin-5.1.2-Unserialize-Code-Execution.html - Exploit
References	~~() http://pastie.org/pastes/10527766/text?key=wq1hgkcj4afb9ipqzllsq - Exploit~~	() http://pastie.org/pastes/10527766/text?key=wq1hgkcj4afb9ipqzllsq - Exploit
References	~~() http://www.rapid7.com/db/modules/exploit/multi/http/vbulletin_unserialize - Exploit~~	() http://www.rapid7.com/db/modules/exploit/multi/http/vbulletin_unserialize - Exploit
References	~~() https://blog.sucuri.net/2015/11/vbulletin-exploits-in-the-wild.html - Exploit~~	() https://blog.sucuri.net/2015/11/vbulletin-exploits-in-the-wild.html - Exploit
References	~~() https://www.exploit-db.com/exploits/38629/ - Exploit~~	() https://www.exploit-db.com/exploits/38629/ - Exploit

Information

Published : 2015-11-24 20:59

Updated : 2025-04-12 10:46

NVD link : CVE-2015-7808

Mitre link : CVE-2015-7808

CVE.ORG link : CVE-2015-7808

JSON object : View

Products Affected

vbulletin

vbulletin

CWE

CWE-20

Improper Input Validation

7.5 /10