CVE-2016-6483

The media-file upload feature in vBulletin before 3.8.7 Patch Level 6, 3.8.8 before Patch Level 2, 3.8.9 before Patch Level 1, 4.x before 4.2.2 Patch Level 6, 4.2.3 before Patch Level 2, 5.x before 5.2.0 Patch Level 3, 5.2.1 before Patch Level 1, and 5.2.2 before Patch Level 1 allows remote attackers to conduct SSRF attacks via a crafted URL that results in a Redirection HTTP status code.

• CWE-918

• http://legalhackers.com/advisories/vBulletin-SSRF-Vulnerability-Exploit.txtExploit, Third Party Advisory
• http://www.securityfocus.com/bid/92350
• http://www.securitytracker.com/id/1036553
• http://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/4349548-security-patch-vbulletin-3-8-7-3-8-8-3-8-9-3-8-10-betaPatch
• http://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/4349549-security-patch-vbulletin-4-2-2-4-2-3-4-2-4-betaPatch
• http://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/4349551-security-patch-vbulletin-5-2-0-5-2-1-5-2-2Patch
• https://www.exploit-db.com/exploits/40225/
• http://legalhackers.com/advisories/vBulletin-SSRF-Vulnerability-Exploit.txtExploit, Third Party Advisory
• http://www.securityfocus.com/bid/92350
• http://www.securitytracker.com/id/1036553
• http://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/4349548-security-patch-vbulletin-3-8-7-3-8-8-3-8-9-3-8-10-betaPatch
• http://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/4349549-security-patch-vbulletin-4-2-2-4-2-3-4-2-4-betaPatch
• http://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/4349551-security-patch-vbulletin-5-2-0-5-2-1-5-2-2Patch
• https://www.exploit-db.com/exploits/40225/

Published

Sep 2, 2016

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6471A vulnerability in the web-based management interface of Cis…
• CVE-2016-6472A vulnerability in several parameters of the ccmivr page of …
• CVE-2016-6473A vulnerability in Cisco IOS on Catalyst Switches and Nexus …
• CVE-2016-6474A vulnerability in the implementation of X.509 Version 3 for…
• CVE-2016-6479Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-6480Race condition in the ioctl_send_fib function in drivers/scs…
• CVE-2016-6484CRLF injection vulnerability in Infoblox Network Automation …
• CVE-2016-6485The __construct function in Framework/Encryption/Crypt.php i…
• CVE-2016-6486Siemens SINEMA Server uses weak permissions for the applicat…
• CVE-2016-6489The RSA and DSA decryption code in Nettle makes it easier fo…7.5
• CVE-2016-6490The virtqueue_map_desc function in hw/virtio/virtio.c in QEM…4.4
• CVE-2016-6491Buffer overflow in the Get8BIMProperty function in MagickCor…