PT-2012-5835 · Vbulletin Solutions · Vbseo

Egix · Published 2012-10-01 · Updated 2017-08-29 · CVE-2012-5223

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions vBSEO versions 3.5.0 through 3.6.0 and earlier

Description The issue allows remote attackers to insert and execute arbitrary PHP code via "complex curly syntax" in the char repl parameter. This parameter is inserted into a regular expression that is processed by the preg replace function with the eval switch.

Recommendations For vBSEO versions 3.5.0 through 3.6.0 and earlier, consider disabling the proc deutf function in includes/functions vbseocp abstract.php until a patch is available. Restrict access to the char repl parameter to minimize the risk of exploitation. Avoid using the char repl parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2012-5223

Affected Products

Vbseo

References · 9

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/vbseo_proc_deutf.rb · Exploit
• 🔥 http://vbseo.com/f5/vbseo-security-bulletin-all-supported-versions-patch-release-52783 · Exploit
• 🔥 http://exploit-db.com/exploits/18424 · Exploit
• 🔥 https://exploit-db.com/exploits/18424 · Exploit
• http://secunia.com/advisories/47699 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-5223 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72689 · Note
• http://osvdb.org/78508 · Note
• http://securityfocus.com/bid/51647 · Note