critical9.8
CVE-2020-12720
vBulletin before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and 5.6.1 before 5.6.1pl1 has incorrect access control.
Impact
vBulletin before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and 5.6.1 before 5.6.1pl1 has incorrect access control.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vbulletin | Vbulletin | from 5.0.0 before 5.5.6 Versions 5.5.6, 5.6.0, 5.6.1.- |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/157716/vBulletin-5.6.1-SQL-Injection.html
- http://packetstormsecurity.com/files/157904/vBulletin-5.6.1-SQL-Injection.html
- https://attackerkb.com/topics/RSDAFLik92/cve-2020-12720-vbulletin-incorrect-access-control
- https://forum.vbulletin.com/forum/vbulletin-announcements/vbulletin-announcements_aa/4440032-vbulletin-5-6-1-security-patch-level-1
- http://packetstormsecurity.com/files/157716/vBulletin-5.6.1-SQL-Injection.html
- http://packetstormsecurity.com/files/157904/vBulletin-5.6.1-SQL-Injection.html
- https://attackerkb.com/topics/RSDAFLik92/cve-2020-12720-vbulletin-incorrect-access-control
- https://forum.vbulletin.com/forum/vbulletin-announcements/vbulletin-announcements_aa/4440032-vbulletin-5-6-1-security-patch-level-1