cve-2019-16759
CRITICAL CVSS 9.8 vulncheck_kev
Description
The PHP module within vBulletin contains an unspecified vulnerability that allows for remote code execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring request.
Timeline
- Published
- 2019-10-09 00:00 UTC
- Last Modified
- 2019-10-09
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
No references available.
Linked Vulnerabilities
No linked vulnerabilities found.
{
"cvss": 9.8,
"datePublished": "2019-10-09T00:00:00Z",
"dateUpdated": "2019-10-09T00:00:00Z",
"description": "The PHP module within vBulletin contains an unspecified vulnerability that allows for remote code execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring request.",
"dueDate": "2022-05-03T00:00:00Z",
"id": "CVE-2019-16759",
"kev_catalogs": [
"vulncheck"
],
"knownRansomwareCampaignUse": "Unknown",
"product": "vBulletin",
"requiredAction": "Apply updates per vendor instructions.",
"severity": "CRITICAL",
"source": "vulncheck_kev",
"title": "vBulletin PHP Module Remote Code Execution Vulnerability",
"vendor": "vBulletin"
}
Enrichment data
Aggregated bundle (all enrichments)