Description
Unspecified vulnerability in the update check in Vanilla Forums before 2.0.18.8 has unspecified impact and remote attack vectors, related to "object injection."
Exploits (1)
References (3)
Core 3
Core References
Vendor Advisory x_refsource_confirm
http://vanillaforums.org/discussion/23339/security-update-vanilla-2-0-18-7
Exploit, Patch x_refsource_confirm
https://github.com/vanillaforums/Garden/commit/b9a10dabb15c697347bfa7baef69a6e211b2f804
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/84167
Scores
EPSS
0.0451
EPSS Percentile
89.2%
Details
Status
published
Products (35)
vanillaforums/vanilla
2.0.1
vanillaforums/vanilla
2.0.2
vanillaforums/vanilla
2.0.3
vanillaforums/vanilla
2.0.4
vanillaforums/vanilla
2.0.5
vanillaforums/vanilla
2.0.6
vanillaforums/vanilla
2.0.7
vanillaforums/vanilla
2.0.8
vanillaforums/vanilla
2.0.9
vanillaforums/vanilla
2.0.10
... and 25 more
Published
May 10, 2013
Tracked Since
Feb 18, 2026