CVE-2015-7808 PoC — vBulletin 任意代码执行漏洞

Source

https://github.com/Prajithp/CVE-2015-7808

Associated Vulnerability

Title: vBulletin 任意代码执行漏洞 (CVE-2015-7808)
Description:The vB_Api_Hook::decodeArguments method in vBulletin 5 Connect 5.1.2 through 5.1.9 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object in the arguments parameter to ajax/api/hook/decodeArguments.

Description

PoC code for vBulletin PreAuth vulnerability

Readme

# CVE-2015-7808
PoC code for vBulletin PreAuth vulnerability

Usage:
  perl vbulletin.pl www.vbulletin.com/forum id

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →