CVE-2020-17496

This PoC exploits CVE-2020-17496, a remote code execution vulnerability in vBulletin 5.x via the widgetConfig parameter in the ajax/render/widget_tabbedcontainer_tab_panel endpoint. It sends a crafted POST request to execute the 'id' command and checks the response for a successful exploit.

This repository contains a working proof-of-concept exploit for CVE-2020-17496, a remote code execution vulnerability in vBulletin 5.6.0. The exploit leverages the widget rendering functionality to execute arbitrary PHP code via the `subWidgets[0][template]` and `subWidgets[0][config][code]` parameters.

This Metasploit module exploits a logic bug in vBulletin 5.x template rendering to achieve remote code execution by bypassing filters via the 'widget_tabbedcontainer_tab_panel' template and 'widget_php' argument. It supports multiple payload types including Meterpreter and command execution.