Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In vBulletin through 5.3.x, there is an unauthenticated deserialization vulnerability that leads to arbitrary file deletion and, under certain circumstances, code execution, because of unsafe usage of PHP's unserialize() in vB_Library_Template's cacheTemplates() function, which is a publicly exposed API. This is exploited with the templateidlist parameter to ajax/api/template/cacheTemplates.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
vBulletin 安全漏洞
Vulnerability Description
vBulletin是美国Internet Brands和vBulletin Solutions公司共同开发的一款开源的商业Web论坛程序。 vBulletin 5.3.x及之前的版本中存在反序列化漏洞，该漏洞源于在vB_Library_Template的‘cacheTemplates()’函数中程序没有安全的使用‘unserialize()’函数。攻击者可利用该漏洞删除任意文件，执行代码。
CVSS Information
N/A
Vulnerability Type
N/A