CVEs-PoC/2020/CVE-2020-12720.md

CVE-2020-12720

Description

vBulletin before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and 5.6.1 before 5.6.1pl1 has incorrect access control.

POC

Reference

• http://packetstormsecurity.com/files/157716/vBulletin-5.6.1-SQL-Injection.html
• http://packetstormsecurity.com/files/157904/vBulletin-5.6.1-SQL-Injection.html
• https://attackerkb.com/topics/RSDAFLik92/cve-2020-12720-vbulletin-incorrect-access-control

Github

• https://github.com/20142995/Goby
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/ARPSyndicate/puncia
• https://github.com/Elsfa7-110/kenzer-templates
• https://github.com/HimmelAward/Goby_POC
• https://github.com/SexyBeast233/SecBooks
• https://github.com/Z0fhack/Goby_POC
• https://github.com/cocomelonc/vulnexipy
• https://github.com/d4n-sec/d4n-sec.github.io
• https://github.com/gnarkill78/CSA_S2_2024
• https://github.com/merlinepedra/nuclei-templates
• https://github.com/merlinepedra25/nuclei-templates
• https://github.com/sobinge/nuclei-templates
• https://github.com/tijldeneut/Security