vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring request.

The version of vBulletin running on the remote host is affected by an input-validation flaw in the ajax/render/widget_php API that allows for remote code execution. This plugin tests for a bypass to the fix for CVE-2019-16759.

The version of vBulletin running on the remote host is affected by an input-validation flaw in the 'widgetConfig' parameter to the script 'ajax/render/widget_php' that allows command execution.

The instance of vBulletin running on the remote host is affected by a command execution vulnerability. A remote, unauthenticated attacker can exploit this issue, via a specially crafted HTTP request, to execute commands on the remote host. All versions of vBulletin prior to the 5.6.x branch are considered vulnerable.

ID	Name	Product	Family	Severity
139457	vBulletin CVE-2019-16759 Bypass Remote Code Execution (CVE-2020-17496) (direct check)	Nessus	CGI abuses	critical
130168	vBulletin 'widget_php' Command Execution	Nessus	CGI abuses	critical
98764	vBulletin < 5.6.2 Patch Level 1 Remote Code Execution Vulnerability	Web App Scanning	Component Vulnerability	critical

Detections

Analytics

CVE-2019-16759

critical

Tenable Plugins

critical

critical

critical