SonicALERT
Search

Sonicwall Signatures

 

Go to All Categories list.


  vBulletin misc.php Remote Code Execution

Category: WEB-ATTACKS      

misc.php for vBulletin 3.0.6 and earlier, when "Add Template Name in HTML Comments" is enabled, allows remote attackers to execute arbitrary PHP code via nested variables in the template parameter.


Relevant Information