CVE-2013-6129

The install/upgrade.php scripts in vBulletin 4.1 and 5 allow remote attackers to create administrative accounts via the customerid, htmldata[password]…

published October 19, 2013

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.0th percentile for exploit probability.

CVSS
—
EPSS
52%
Percentile
99.0
In the wild
Unconfirmed
What it is

The install/upgrade.php scripts in vBulletin 4.1 and 5 allow remote attackers to create administrative accounts via the customerid, htmldata[password], htmldata[confirmpassword], and htmldata[email] parameters, as exploited in the wild in October 2013.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.51887 · 99.0th percentile
Published
2013-10-19T10:00Z
EPSS history
Timeline
  • 19 OCT 10:00Z
    The install/upgrade.php scripts in vBulletin 4.1 and 5 allow remote attackers to create administrative accounts via the customerid, htmldata[password]…
    cvelistv5