Summary
This host is running vBulletin and is prone to security bypass vulnerability.
Impact
Successful exploitation will allow remote attackers to bypass security restrictions.
Impact Level: Application
Solution
Upgrade to version 4.2.2 or 5.0.5 or later,
For updates refer to http://www.vbulletin.com
Insight
The flaw is due to the 'upgrade.php' script which does not require authentication, which allows to create administrative accounts via the customerid, htmldata[password], htmldata[confirmpassword], and htmldata[email] parameters.
Affected
vBulletin version 4.1.x and 5.x.x are affected.
Detection
Send a crafted exploit string via HTTP GET request and check whether it is able to bypass authentication.
References
Severity
Classification
-
CVE CVE-2013-6129 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities
- Adobe ColdFusion Components (CFC) Denial Of Service Vulnerability
- Adobe ColdFusion Information Disclosure Vulnerability
- Acute Control Panel SQL Injection Vulnerability and Remote File Include Vulnerability
- Apache Tomcat/JBoss EJBInvokerServlet / JMXInvokerServlet (RMI over HTTP) Marshalled Object Remote Code Execution
- Andy's PHP Knowledgebase 'step5.php' Remote PHP Code Execution Vulnerability