PT-2016-6795 · Vbulletin Solutions · Vbulletin

Dantalion · Published 2016-08-30 · Updated 2017-08-21 · CVE-2016-6195

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions vBulletin versions prior to 4.2.2 Patch Level 5 vBulletin versions 4.2.3 prior to Patch Level 1

Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the postids parameter to "forumrunner/request.php". This issue has been exploited in the wild.

Recommendations For versions prior to 4.2.2 Patch Level 5, update to version 4.2.2 Patch Level 5 or later. For versions 4.2.3 prior to Patch Level 1, update to version 4.2.3 Patch Level 1 or later. As a temporary workaround, consider restricting access to the "forumrunner/request.php" endpoint to minimize the risk of exploitation. Avoid using the postids parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

RCE

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2016-6195

Affected Products

Vbulletin

References · 7

• 🔥 https://exploit-db.com/exploits/40751 · Exploit
• http://vbulletin.org/forum/showthread.php?t=322848 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-6195 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-6195 · Security Note
• https://github.com/drewlong/vbully · Note
• https://enumerated.wordpress.com/2016/07/11/1 · Note
• http://securityfocus.com/bid/92687 · Note