SonicWALL Security Center

Sonicwall Signatures

Go to All Categories list.

vBulletin widgetConfig Remote Command Execution

Category: WEB-ATTACKS

vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring request.

References

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16759

Relevant Information