← All advisories

Medium severity6.5NVD Advisory· Published Oct 4, 2019· Updated Jun 17, 2026

CVE-2019-17130

CVE-2019-17130

Description

vBulletin through 5.5.4 mishandles external URLs within the /core/vb/vurl.php file and the /core/vb/vurl directories.

Affected products

3

Jelsoft/Vbulletin2 versions
cpe:2.3:a:vbulletin:vbulletin:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:vbulletin:vbulletin:*:*:*:*:*:*:*:*range: <=5.5.4
- (no CPE)range: <=5.5.4
vBulletin/vBulletindescription

Patches

Vulnerability mechanics

References

1

forum.vbulletin.com/forum/vbulletin-announcements/vbulletin-announcements_aa/4423391-vbulletin-5-5-5-alpha-4-available-for-downloadnvdVendor Advisory

News mentions

0

No linked articles in our index yet.