📦

vbulletin

Vendor: vbulletin

Login to add this product to WatchStack
Actively Exploited 2 CISA KEV List
PoC / Exploits 45 Code Available
Total RCEs 9 Remote Access
Total CVEs 426 Total Indexed
Avg. EPSS 8.83% Exploit Prob.
Latest CVE CVE-2025-46171 Jul 23

Security Vulnerability Index

Page 3 / 43
4.3 CVSS
CVE-2019-17131

vBulletin before 5.5.4 allows clickjacking.

EPSS: 0.84%
6.5 CVSS
CVE-2019-17130

vBulletin through 5.5.4 mishandles external URLs within the /core/vb/vurl.php file and the /core/vb/vurl directories.

EPSS: 0.96%
Critical Target
9.8 CVSS
CVE-2019-16759
RCE Exploit Found

vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring request.

EPSS: 99.73%
6.1 CVSS
CVE-2018-15493

vBulletin 5.4.3 has an Open Redirect.

EPSS: 0.66%
6.1 CVSS
CVE-2018-6200

vBulletin 3.x.x and 4.2.x through 4.2.5 has an open redirect via the redirector.php url parameter.

EPSS: 3.16%
9.8 CVSS
CVE-2017-17672
RCE Exploit Found

In vBulletin through 5.3.x, there is an unauthenticated deserialization vulnerability that leads to arbitrary file deletion and, under certain circumstances, code execution, because of unsafe usage of PHP's unserialize() in vB_Library_Template's cacheTemplates() function, which is a publicly exposed API. This is exploited with the templateidlist parameter to ajax/api/template/cacheTemplates.

EPSS: 14.91%
9.8 CVSS
CVE-2017-17671

vBulletin through 5.3.x on Windows allows remote PHP code execution because a require_once call is reachable with an unauthenticated request that can include directory traversal sequences to specify an arbitrary pathname, and because ../ traversal is blocked but ..\ traversal is not blocked. For example, an attacker can make an invalid HTTP request containing PHP code, and then make an index.php?routestring= request with enough instances of ".." to reach an Apache HTTP Server log file.

EPSS: 3.05%
6.5 CVSS
CVE-2015-3419

vBulletin 5.x through 5.1.6 allows remote authenticated users to bypass authorization checks and inject private messages into conversations via vectors related to an input validation failure.

EPSS: 0.98%
8.8 CVSS
CVE-2014-9463
RCE Exploit Found

functions_vbseo_hook.php in the VBSEO module for vBulletin allows remote authenticated users to execute arbitrary code via the HTTP Referer header to visitormessage.php.

EPSS: 14.79%
6.1 CVSS
CVE-2014-9469

Cross-site scripting (XSS) vulnerability in vBulletin 3.5.4, 3.6.0, 3.6.7, 3.8.7, 4.2.2, 5.0.5, and 5.1.3.

EPSS: 1.40%