CVEvulnerability
CVE-2010-1077
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-03-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in vbseo.php in Crawlability vBSEO plugin 3.1.0 for vBulletin allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the vbseourl parameter.
Affected configurations
• vbseo vbseo 3.1.0
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://packetstormsecurity.org/1002-exploits/vbseo-lfi.txt packetstormsecurity.org
- http://www.exploit-db.com/exploits/11526 Exploit
- http://www.vupen.com/english/advisories/2010/0442 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56439 exchange.xforce.ibmcloud.com
- http://packetstormsecurity.org/1002-exploits/vbseo-lfi.txt packetstormsecurity.org
- http://www.exploit-db.com/exploits/11526 Exploit
- http://www.vupen.com/english/advisories/2010/0442 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56439 exchange.xforce.ibmcloud.com