PT-2013-5950 · Vbulletin Solutions · Vbulletin

Barry Shteiman · Published 2013-10-19 · Updated 2013-11-21 · CVE-2013-6129

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions vBulletin versions 4.1 and 5

Description The issue allows remote attackers to create administrative accounts via the customerid, htmldata[password], htmldata[confirmpassword], and htmldata[email] parameters. This has been exploited in the wild.

Recommendations For vBulletin version 4.1, update to a version that fixes this issue. For vBulletin version 5, update to a version that fixes this issue. As a temporary workaround, consider restricting access to the install/upgrade.php script until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2013-6129

Affected Products

Vbulletin

References · 6

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/vbulletin_upgrade_admin.rb · Exploit
• 🔥 https://exploit-db.com/exploits/38785 · Exploit
• 🔥 http://net-security.org/secworld.php?id=15743 · Exploit
• http://vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/3991423-potential-vbulletin-exploit-vbulletin-4-1-vbulletin-5 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-6129 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6129 · Note