CVE-2020-12720

vBulletin before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and 5.6.1 before 5.6.1pl1 has incorrect access control.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:vbulletin:vbulletin:*:*:*:*:*:*:*:*
cpe:2.3:a:vbulletin:vbulletin:5.5.6:-:*:*:*:*:*:*
cpe:2.3:a:vbulletin:vbulletin:5.6.0:-:*:*:*:*:*:*
cpe:2.3:a:vbulletin:vbulletin:5.6.1.-:*:*:*:*:*:*:*

Information

Published : 2020-05-07 17:15

Updated : 2022-04-27 08:04


NVD link : CVE-2020-12720

Mitre link : CVE-2020-12720


JSON object : View

CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CWE-306

Missing Authentication for Critical Function

Advertisement

dedicated server usa

Products Affected

vbulletin

  • vbulletin