CVE-2013-6129
72Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 52%
from disclosure to weapon0 days
Published on NVDOct 19
1st PoCOct 13
metasploitOct 9
VulnCheckOct 19
exploitation probability
52%top 1% of all CVEs
observed exploitation
yesVulnCheck
1 public exploit(s)
The install/upgrade.php scripts in vBulletin 4.1 and 5 allow remote attackers to create administrative accounts via the customerid, htmldata[password], htmldata[confirmpassword], and htmldata[email] parameters, as exploited in the wild in October 2013.
Affected products
n/a · n/apublic PoCs found — 1
exploitdbwww.exploit-db.com/exploits/38785unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.