Nessus Plugin #16455

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

vBulletin Forumdisplay.PHP Remote Command Execution Vulnerability

Family:

CGI abuses

Category:

attack

Copyright:

This script is Copyright (C) 2005 David Maciejak

Summary:

Checks for vBulletin Forumdisplay.PHP Remote Command Execution Vulnerability

Version:

$Revision: 1.2 $

Cve_id:

-

Bugtraq_id:

12542

Xrefs:

-

Description:

The remote host is running vBulletin, a web based bulletin board system
written in PHP.

The remote version of this software is vulnerable to remote command
execution flaw throught the script 'forumdisplay.php'.

A malicious user could exploit this flaw to execute arbitrary command on
the remote host with the privileges of the web server.

Solution: Upgrade vBulletin 3.0.4 or newer
Risk factor : High