S4E just found a high-severity finding from top 10 tcp port service scan
PlatformPlansPartners
Resources
ToolsBlogDocs
Sign Up →
critical·Product Based Web Vulnerabilities·Updated Jan 3, 2024

CVE-2023-25135 Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in vBulletin affects v. before 5.6.9 PL1.

Est. Time~10 seconds
Scan TypeSingle Scan
Targetsdomain, ipv4, subdomain
CostFree
3.4k
Times Used
continuous scan runs
5.5k
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
CVECVE-2023-25135
9.8
CVSScritical
Exploitable remotely over the internet · no authentication required.

vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP request that triggers deserialization. This occurs because verify_serialized checks that a value is serialized by calling unserialize and then checking for errors. The fixed versions are 5.6.7 PL1, 5.6.8 PL1, and 5.6.9 PL1.

Attack Vector
Network
Privileges Req.
None
User Interaction
None
Affected
n/aby n/a
n/a
Updated Aug 19, 2026View on NVD →
Detail

vBulletin is a popular software application used for creating online forums and discussion boards. The product is widely adopted by organizations, businesses, and websites seeking to engage their audience through online conversations and community building. With a user-friendly interface, vBulletin offers various features that allow users to customize and manage forum discussions, user accounts, and permissions.

However, vBulletin is not exempt from security vulnerabilities. In particular, the CVE-2023-25135 vulnerability detected in vBulletin versions before 5.6.9 PL1 poses a significant threat to website owners and users. This vulnerability allows an unauthenticated remote attacker to execute arbitrary code through a crafted HTTP request that triggers deserialization. Essentially, an attacker can gain access to and manipulate data stored in vBulletin, which can result in unauthorized changes, data breaches, and confidential information disclosure.

The exploitation of this vulnerability can have severe consequences for website owners and users. For example, an attacker could gain administrator-level access and control over the entire forum, modify user accounts, and obtain sensitive information such as passwords, email addresses, and personal details. Additionally, the attacker can use the compromised forum as a launching point for further attacks on other systems or users.

The pro features of the s4e.io platform allow users to easily and quickly learn about vulnerabilities in their digital assets. By subscribing to the service, users gain access to advanced threat intelligence, real-time alerts, and remediation guidance. With s4e.io, website owners and administrators can stay ahead of emerging threats and protect their websites and users against potential attacks.

 

REFERENCES

Solution Advice

To protect against the CVE-2023-25135 vulnerability in vBulletin, website owners and administrators should consider adopting the following precautions:

  • Install the fixed versions of vBulletin (5.6.7 PL1, 5.6.8 PL1, and 5.6.9 PL1) immediately.
  • Monitor and limit network traffic to and from vBulletin instances.
  • Implement firewalls and intrusion prevention systems (IPS) to block malicious HTTP requests and unauthorized access attempts.
  • Enforce strong password policies and multi-factor authentication to prevent unauthorized access to user accounts.
  • Regularly update and patch vBulletin and all other software and applications used on the website.

Get AI-powered remediation steps tailored to your asset.

Try AI Solutions →

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.