CVEs-PoC/2014/CVE-2014-9463.md

CVE-2014-9463

Description

functions_vbseo_hook.php in the VBSEO module for vBulletin allows remote authenticated users to execute arbitrary code via the HTTP Referer header to visitormessage.php.

POC

Reference

• https://blog.sucuri.net/2015/01/serious-vulnerability-on-vbseo.html
• https://www.exploit-db.com/exploits/36232/

Github

No PoCs found on GitHub currently.