CVE

Id
93303  
CVE No.
CVE-2016-6483  
Status
Candidate  
Description
The media-file upload feature in vBulletin before 3.8.7 Patch Level 6, 3.8.8 before Patch Level 2, 3.8.9 before Patch Level 1, 4.x before 4.2.2 Patch Level 6, 4.2.3 before Patch Level 2, 5.x before 5.2.0 Patch Level 3, 5.2.1 before Patch Level 1, and 5.2.2 before Patch Level 1 allows remote attackers to conduct SSRF attacks via a crafted URL that results in a Redirection HTTP status code.  
Phase
Assigned (20160727)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
793355 93303 CVE-2016-6483 MISC:http://legalhackers.com/advisories/vBulletin-SSRF-Vulnerability-Exploit.txt  View
793356 93303 CVE-2016-6483 CONFIRM:http://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/4349548-security-patch-vbulletin-3-8-7-3-8-8-3-8-9-3-8-10-beta  View
793357 93303 CVE-2016-6483 CONFIRM:http://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/4349549-security-patch-vbulletin-4-2-2-4-2-3-4-2-4-beta  View
793358 93303 CVE-2016-6483 CONFIRM:http://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/4349551-security-patch-vbulletin-5-2-0-5-2-1-5-2-2  View
793359 93303 CVE-2016-6483 BID:92350  View

Related JVN