CVE-2013-6129
EXPLOITED IN THE WILDvBulletin 4.1 and 5 - Unauthenticated Administrative Account Creation via install/upgrade.php
Title source: llmExploitation Summary
CVE-2013-6129 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io).
EIP tracks 2 public exploits from researchers including Joshua Rogers, Unknown, juan vazquez, including a Metasploit module auxiliary/admin/http/vbulletin_upgrade_admin.
AI-analyzed exploit summary This Perl script exploits an authentication bypass in vBulletin's upgrade.php to inject a new admin account by extracting the customer number from the script's source and submitting a crafted POST request.
Description
The install/upgrade.php scripts in vBulletin 4.1 and 5 allow remote attackers to create administrative accounts via the customerid, htmldata[password], htmldata[confirmpassword], and htmldata[email] parameters, as exploited in the wild in October 2013.
Exploits (2)
This Perl script exploits an authentication bypass in vBulletin's upgrade.php to inject a new admin account by extracting the customer number from the script's source and submitting a crafted POST request.
This Metasploit module exploits a vulnerability in vBulletin's upgrade.php to create an administrator account by sending a crafted POST request. It has been tested on vBulletin 4.1.5 and 4.1.0.