Monday, December 18, 2017

Two critical and unpatched flaws identified in vBulletin

One of the two identified vulnerabilities is a file inclusion flaw that eventually allows remote code execution, through which the attacker can remotely include any vBulletin server file by sending GET command to index.php and routestring= parameter and execute arbitrary PHP code. The attacker can ...

from Google Alert - vulnerability http://ift.tt/2CzgAyr
via IFTTT

No comments:

Post a Comment