Test ID:	1.3.6.1.4.1.25623.1.0.809158
Category:	Web application abuses
Title:	vBulletin 3.0.x <= 3.8.9, 4.0.x <= 4.2.3, 5.0.x <= 5.2.2 Preauth SSRF Vulnerability
Summary:	vBulletin is prone to a server-side request forgery (SSRF); vulnerability.
Description:	Summary: vBulletin is prone to a server-side request forgery (SSRF) vulnerability. Vulnerability Insight: The flaw exists due to a codebase accepts HTTP redirects from the target server specified in a user-provided link. Vulnerability Impact: Successfully exploiting this issue allow unauthenticated remote attackers to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks. Affected Software/OS: vBulletin versions 5.0 through 5.2.2, and 4.0 through 4.2.3, and 3.0 through 3.8.9. Solution: Upgrade to vBulletin version 5.2.3, or 4.2.4 Beta, or 3.8.10 Beta, or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-6483 BugTraq ID: 92350 http://www.securityfocus.com/bid/92350 https://www.exploit-db.com/exploits/40225/ http://legalhackers.com/advisories/vBulletin-SSRF-Vulnerability-Exploit.txt http://www.securitytracker.com/id/1036553
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.