← All advisories

Critical severity9.8NVD Advisory· Published Oct 4, 2019· Updated Jun 17, 2026

CVE-2019-17132

CVE-2019-17132

Description

vBulletin through 5.5.4 mishandles custom avatars.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Jelsoft/Vbulletin2 versions
cpe:2.3:a:vbulletin:vbulletin:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:vbulletin:vbulletin:*:*:*:*:*:*:*:*range: <=5.5.4
- (no CPE)range: <=5.5.4
vBulletin/vBulletindescription

Patches

Vulnerability mechanics

References

3

packetstormsecurity.com/files/154759/vBulletin-5.5.4-Remote-Code-Execution.htmlnvdThird Party Advisory
seclists.org/fulldisclosure/2019/Oct/9nvdThird Party Advisory
forum.vbulletin.com/forum/vbulletin-announcements/vbulletin-announcements_aa/4423646-vbulletin-5-5-x-5-5-2-5-5-3-and-5-5-4-security-patch-level-2nvdVendor Advisory

News mentions

0

No linked articles in our index yet.