CVE-2015-7808
EXPLOITED IN THE WILDvBulletin 5 Connect <5.1.9 - Code Injection
Title source: llmExploitation Summary
CVE-2015-7808 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io).
EIP tracks 5 public exploits from researchers including Mohammad Reza Espargham, hhjj, Metasploit, including a Metasploit module exploits/multi/http/vbulletin_unserialize.
AI-analyzed exploit summary This exploit leverages a PHP object injection vulnerability in vBulletin 5.x via the `/ajax/api/hook/decodeArguments` endpoint. It achieves remote code execution by manipulating serialized objects to execute arbitrary system commands.
Description
The vB_Api_Hook::decodeArguments method in vBulletin 5 Connect 5.1.2 through 5.1.9 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object in the arguments parameter to ajax/api/hook/decodeArguments.
Exploits (5)
This exploit leverages a PHP object injection vulnerability in vBulletin 5.x via the `/ajax/api/hook/decodeArguments` endpoint. It achieves remote code execution by manipulating serialized objects to execute arbitrary system commands.
This exploit leverages a PHP object injection vulnerability in vBulletin 5.1.x via the `decodeArguments` endpoint. It constructs a serialized payload that triggers the `__destruct` method of `vB_dB_Result`, leading to arbitrary method execution (e.g., `phpinfo`).
This Metasploit module exploits a PHP object injection vulnerability in vBulletin 5.1.2 to 5.1.9 via deserialization in the 'ajax/api/hook/decodeArguments' endpoint. It leverages the 'vB_dB_Result' class to execute arbitrary PHP code through the 'assert' function.
This repository contains a functional Perl exploit for CVE-2015-7808, a pre-authentication PHP object injection vulnerability in vBulletin. The exploit leverages unsafe deserialization in the `vB_dB_Result` class to execute arbitrary commands via the `assert` function.
This Metasploit module exploits a PHP object injection vulnerability in vBulletin 5.1.2 to 5.1.9 via unsafe unserialize in the 'decodeArguments' endpoint. It chains gadgets to achieve remote code execution by leveraging the 'vB_dB_Result' and 'vB_Database' classes.