high7.5Public exploit code
CVE-2013-3528
Unspecified vulnerability in the update check in Vanilla Forums before 2.0.18.8 has unspecified impact and remote attack vectors, related to "object injection."
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Vanilla Forums 2.0 < 2.0.18.5 - 'class.utilitycontroller.php' PHP Object Injection2013-11-08 · webapps · php · Verified
Impact
Unspecified vulnerability in the update check in Vanilla Forums before 2.0.18.8 has unspecified impact and remote attack vectors, related to "object injection."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vanillaforums | Vanilla | through 2.0.18.7 Versions 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5 |
References
- NVD record
- CVE.org record
- http://vanillaforums.org/discussion/23339/security-update-vanilla-2-0-18-7
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84167
- https://github.com/vanillaforums/Garden/commit/b9a10dabb15c697347bfa7baef69a6e211b2f804
- http://vanillaforums.org/discussion/23339/security-update-vanilla-2-0-18-7
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84167
- https://github.com/vanillaforums/Garden/commit/b9a10dabb15c697347bfa7baef69a6e211b2f804