RCE in vBulletin, 9.5 rating 🔥

vBulletin versions 5.0.0 through 6.0.3 contain an RCE vulnerability in the replaceAdTemplate endpoint that allows attackers to execute arbitrary PHP code on the server.

Search at Netlas.io:
👉 Link: https://nt.ls/42h8I
👉 Dork: http.meta:"vBulletin" AND (http.meta:"5.5.4" OR http.meta:"5.7.0" OR http.meta:"5.7.5" OR http.meta:"5.7.4")

Read more: https://cloud.projectdiscovery.io/library/vbulletin-replacead-rce