Threats tagged 'ghsa-43hg-f3wj-j2m6'

vBulletin versions 5.x through 5.7.5 and 6.x through 6.2.1 contain a critical eval injection vulnerability in the vB5_Template_Runtime::runMaths() method. This flaw allows unauthenticated remote attackers to execute arbitrary PHP code by sending crafted input via the pagenav[pagenumber] parameter through the ajax/render template route. The vulnerability arises from an insufficiently restrictive regex filter that can be bypassed using phpfuck-style encoding. The CVSS 3.1 score for this vulnerability is 9.8, indicating critical severity.