CVE-2025-48827

This repository contains a functional exploit for CVE-2025-48827, targeting vBulletin's ajax/api/ad/replaceAdTemplate endpoint. The exploit leverages improper PHP Reflection API usage to inject a malicious template, enabling unauthenticated RCE via crafted <vb:if> conditionals and subsequent command execution through ajax/render/ad_<location>.

This repository contains a functional Python-based exploit for CVE-2025-48827, an authentication bypass vulnerability in vBulletin 5.0.0–5.7.5 and 6.0.0–6.0.3 running on PHP 8.1+. The exploit sends a crafted request to the `/ajax/api/ad/wrapAdTemplate` endpoint to confirm vulnerability.

This repository contains a functional exploit for CVE-2025-48827, targeting vBulletin versions 5.0.0-5.7.5 and 6.0.0-6.0.3 with PHP 8.1. The exploit automates detection, RCE testing, and shell upload via a crafted template injection in the 'ajax/api/ad/replaceAdTemplate' endpoint.

This Metasploit module exploits a design flaw in vBulletin's AJAX API handler and template rendering system, allowing unauthenticated attackers to execute arbitrary commands via template injection and reflection API misuse. It targets versions 5.0.0 through 6.0.3, leveraging PHP 8.1+ behaviors to achieve RCE.