NOMISEC-polar1s7/CVE-2019-16759-bypass

NOMISEC WORKING POC
Exploit for CVE-2019-16759 - vBulletin 5.x /ajax/render/widget_tabbedcontainer_tab_panel PHP remote code execution.
AI Analysis

This repository contains a functional exploit for CVE-2019-16759, a remote code execution vulnerability in vBulletin. The exploit leverages a widget template injection to execute arbitrary PHP code, bypassing authentication and uploading a shell.

Attack Type
RCE
Complexity
moderate
Reliability
reliable
MITRE ATT&CK
T1190 - Exploit Public-Facing Application T1203 - Exploitation for Client Execution
Loading exploit code...
Download ZIP Password: eip
Source
Platform Nomisec
Type remote
Files 3
Stars 0
Forks 1
Last Push Aug 12, 2020
Authors
polar1s7
Vulnerability
CVE-2019-16759
vBulletin 5.x /ajax/render/widget_tabbedcontainer_tab_panel PHP remote code execution.
CRITICAL KEV
CVSS 9.8