vBulletin replaceAdTemplate Remote Code Execution#20235

Merged

dledda-r7 merged 15 commits intorapid7:masterfrom

Chocapikk:vbulletin_replace_ad_template_rce

Jun 19, 2025

Commits on May 23, 2025

Commits on May 25, 2025

Update doc, module
Chocapikk
committed

Commits on May 26, 2025

Fix check, both requests can display if the system is vulnerable
Chocapikk
committed
Non-blocking requests when trying to exploit, since the payload can be triggered twice
Chocapikk
committed

Commits on May 27, 2025

Add CVE IDs
Chocapikk
committed

Commits on May 29, 2025