writeups.xyz / Exploiting an N-day vBulletin PHP Object Injection Vulnerability

Submitter : c2a

Date: 26 November 2022

Bounty : undisclosed

Vulnerabilities :

• PHP Object Injection
• Security Code Review

Programs :

• VBulletin

Authors :

• Egidio Romano / EgiX

Link :
https://karmainsecurity.com/exploiting-an-nday-vbulletin-php-object-injection