Sploitus

CVE-2016-6483

5 known exploits for CVE-2016-6483

The media-file upload feature in vBulletin before 3.8.7 Patch Level 6, 3.8.8 before Patch Level 2, 3.8.9 before Patch Level 1, 4.x before 4.2.2 Patch Level 6, 4.2.3 before Patch Level 2, 5.x before 5.2.0 Patch Level 3, 5.2.1 before Patch Level 1, and 5.2.2 before Patch Level 1 allows remote attackers to conduct SSRF attacks via a crafted URL that results in a Redirection HTTP status code.

Affected products
Vbulletin
Vbulletin
= 3.8.7, 3.8.8, 3.8.9, 4.2.2, 4.2.3, 5.2.0, 5.2.1, 5.2.2
Fix
Available
CVSS 3.0
8.6 HIGH
EPSS
11.9% (96th percentile)
Weakness
CWE-918
NVD status
Modified
Published
2016-09-02
CVE-2016-6483 at NVD
Authoritative description, scoring and affected products

5 known exploits for CVE-2016-6483

Proof-of-concept code and exploit modules indexed by Sploitus

vBulletin 5.2.2 - Unauthenticated Server Side Request Forgery
2016-08-10 Dawid GolunskiZDT
vBulletin 5.2.2 - Server-Side Request Forgery
2016-08-10 Dawid GolunskiEXPLOITPACK
vBulletin 5.2.2 - Server-Side Request Forgery
2016-08-10 Dawid GolunskiEXPLOITDB
VBULLETIN 5.2.0/5.2.1/5.2.2 MEDIA UPLOAD SSRF PRIVILEGE ESCALATION
2016-08-09 RootSEEBUG
vBulletin 5.2.2 / 4.2.3 / 3.8.9 Server Side Request Forgery
2016-08-08 Dawid GolunskiPACKETSTORM