CVE-2019-16759criticalunder attackCWE-94

CVE-2019-16759

Published · Updated

Follow this CVE+ Monitor vBulletin

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.8epss 100%
from disclosure to weaponsame day
Published on NVDSep 24
1st PoCSep 23
metasploitSep 23
CISA KEV+771d
Action required by CISAfederal deadline: 2022-05-03

Apply updates per vendor instructions.

In short

vBulletin 5.x through 5.5.4 allows attackers to run arbitrary code on the server by sending a malicious request through a specific web parameter. This is critical because it gives attackers complete control over the website and its data.

Technical detail

The vulnerability exists in the ajax/render/widget_php route where the widgetConfig[code] parameter is improperly validated, allowing unauthenticated remote code execution. An attacker can inject arbitrary PHP code that executes server-side, compromising the entire application and underlying system.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring request.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
public PoCs found — 34
exploitdbwww.exploit-db.com/exploits/47437unverifiedexploitdbwww.exploit-db.com/exploits/47447unverifiedgithubgithub.com/jas502n/CVE-2019-16759★ 21githubgithub.com/theLSA/vbulletin5-rce★ 20githubgithub.com/0xdims/CVE-2019-16759★ 6githubgithub.com/M0sterHxck/CVE-2019-16759-Vbulletin-rce-exploit★ 5githubgithub.com/andripwn/pwn-vbulletin★ 4githubgithub.com/FarjaalAhmad/CVE-2019-16759★ 4githubgithub.com/r00tpgp/http-vuln-CVE-2019-16759★ 3githubgithub.com/sunian19/CVE-2019-16759★ 1githubgithub.com/nako48/CVE-2019-16759★ 1githubgithub.com/ludy-dev/vBulletin_Routestring-RCE★ 1githubgithub.com/psychoxploit/vbull★ 0githubgithub.com/polar1s7/CVE-2019-16759-bypass★ 0githubgithub.com/fxp0-4tx/CVE-2019-16759★ 0githubgithub.com/shavchen/CVE-2019-16759★ 0cve_referencepacketstormsecurity.com/files/154648/vBulletin-5.x-Pre-Auth-Remote-Code-Execution.htmlunverifiedvulncheckvulncheck.com/xdb/d853d7e336d8unverifiedcve_referencepacketstormsecurity.com/files/158829/vBulletin-5.x-Remote-Code-Execution.htmlunverifiedcve_referencepacketstormsecurity.com/files/158866/vBulletin-5.x-Remote-Code-Execution.htmlunverifiedcve_referencepacketstormsecurity.com/files/158830/vBulletin-5.x-Remote-Code-Execution.htmlunverifiedcve_referencepacketstormsecurity.com/files/154623/vBulletin-5.x-0-Day-Pre-Auth-Remote-Command-Execution.htmlunverifiedvulncheckvulncheck.com/xdb/1947002334c8unverifiedcve_referencepacketstormsecurity.com/files/155633/vBulletin-5.5.4-Remote-Command-Execution.htmlunverifiedvulncheckvulncheck.com/xdb/e94e5a578e27unverifiedvulncheckvulncheck.com/xdb/60d80aaa798dunverifiedvulncheckvulncheck.com/xdb/f77f6e256780unverifiedvulncheckvulncheck.com/xdb/5075aca956f4unverifiedvulncheckvulncheck.com/xdb/7275122ff481unverifiedvulncheckvulncheck.com/xdb/864418406fc2unverifiedvulncheckvulncheck.com/xdb/071ec90a6cd3unverifiedvulncheckvulncheck.com/xdb/7d63cbd8af55unverifiedvulncheckvulncheck.com/xdb/4587d75eac06unverifiedvulncheckvulncheck.com/xdb/4e40b1a2d3faunverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.