CVE-2020-12720 Scanner
CVE-2020-12720 scanner - Improper Access Control vulnerability in vBulletin
Short Info
Level
Critical
Single Scan
Single Scan
Can be used by
Asset Owner
Estimated Time
30 seconds
Time Interval
4 weeks
Scan only one
URL
Toolbox
-
vBulletin is a software package used to create online communities and internet forums. It is a flexible and user-friendly platform that allows users to create and manage their own forums. vBulletin has been a popular choice for many big forums and online communities worldwide due to its ease of use and customization options.
However, recently a new vulnerability has been identified in vBulletin. CVE-2020-12720, an access control issue, has been detected in vBulletin versions before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and 5.6.1 before 5.6.1pl1. This vulnerability allows an attacker to gain access to sensitive information stored within the vBulletin database.
When exploited, this vulnerability can lead to significant damage to the targeted website or forum. Attackers can gain access to personal information such as usernames, passwords, and email addresses, and use this information to manipulate or exploit the users of the forum or website. Moreover, attackers can use this vulnerability to execute malicious code and to launch other cyber attacks against the targeted website or forum.
Thanks to the pro features of the s4e.io platform, users can easily and quickly learn about vulnerabilities in their digital assets. By staying up-to-date with security measures and always keeping their software up-to-date, users can ensure the safety and security of their online community and its users.
REFERENCES
- https://forum.vbulletin.com/forum/vbulletin-announcements/vbulletin-announcements_aa/4440032-vbulletin-5-6-1-security-patch-level-1
- http://packetstormsecurity.com/files/157716/vBulletin-5.6.1-SQL-Injection.html
- http://packetstormsecurity.com/files/157904/vBulletin-5.6.1-SQL-Injection.html
- https://attackerkb.com/topics/RSDAFLik92/cve-2020-12720-vbulletin-incorrect-access-control