high8.8Public exploit code
CVE-2014-9463
functions_vbseo_hook.php in the VBSEO module for vBulletin allows remote authenticated users to execute arbitrary code via the HTTP Referer header to visitorme…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- vBulletin vBSEO 4.x - 'visitormessage.php' Remote Code Injection2015-03-02 · webapps · php · Verified
Impact
functions_vbseo_hook.php in the VBSEO module for vBulletin allows remote authenticated users to execute arbitrary code via the HTTP Referer header to visitormessage.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vbseo | Vbseo | All versions |