Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Jelsoft vBulletin accepts uploads of Cascading Style Sheets (CSS) and processes them in a way that allows remote authenticated administrators to gain shell access by uploading a CSS file that contains PHP code, then selecting the file via the style chooser, which causes the PHP code to be executed. NOTE: the vendor was unable to reproduce this issue in 3.5.x. NOTE: this issue might be due to direct static code injection.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Jelsoft vBulletin 输入验证漏洞
Vulnerability Description
Jelsoft vBulletin接受层叠式样式表(CSS)的上传，并且处理这些样式标的方式可以使远程认证管理员通过上传含PHP代码的CSS文件，然后再用样式选择器选择这些文件，使PHP代码得以执行，从而获得存档远程访问权。注意: 厂商未能在3.5.x中再现此问题。 注意: 此问题可能由直接静态代码注入所致。
CVSS Information
N/A
Vulnerability Type
N/A