CVE-2014-9463

functions_vbseo_hook.php in the VBSEO module for vBulletin allows remote authenticated users to execute arbitrary code via the HTTP Referer header to visitormessage.php.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2017-09-15

Last modified

2024-08-06

Weaknesses

CWE-94

Affected products

• Vbseo (Vbseo)

References

• https://blog.sucuri.net/2015/01/serious-vulnerability-on-vbseo.html
• https://www.exploit-db.com/exploits/36232/