Overview : |
vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring request. |
Affected Product(s) : |
|
Vulnerability Details : |
||||
Solution : Updates are available by contacting the sales support channel or by contacting the vBulletin support team at support@vBulletin.com |