CVE-2017-17672

In vBulletin through 5.3.x, there is an unauthenticated deserialization vulnerability that leads to arbitrary file deletion and, under certain circumstances, code execution, because of unsafe usage of PHP's unserialize() in vB_Library_Template's cacheTemplates() function, which is a publicly exposed API. This is exploited with the templateidlist parameter to ajax/api/template/cacheTemplates.

• CWE-502

• https://blogs.securiteam.com/index.php/archives/3573Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/43362/Exploit, Third Party Advisory, VDB Entry
• https://blogs.securiteam.com/index.php/archives/3573Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/43362/Exploit, Third Party Advisory, VDB Entry

Published

Dec 14, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-17665In Octopus Deploy before 4.1.3, the machine update process d…
• CVE-2017-17668Memory write mechanism in NCR S1 Dispenser controller before…
• CVE-2017-17669There is a heap-based buffer over-read in the Exiv2::Interna…5.5
• CVE-2017-1767IBM Business Process Manager 8.6 is vulnerable to cross-site…5.4
• CVE-2017-17670In VideoLAN VLC media player through 2.2.8, there is a type …
• CVE-2017-17671vBulletin through 5.3.x on Windows allows remote PHP code ex…9.8
• CVE-2017-17674BMC Remedy Mid Tier 9.1SP3 is affected by remote and local f…9.8
• CVE-2017-17675BMC Remedy Mid Tier 9.1SP3 is affected by log hijacking. Rem…5.3
• CVE-2017-17677BMC Remedy 9.1SP3 is affected by authenticated code executio…8.8
• CVE-2017-17678BMC Remedy Mid Tier 9.1SP3 is affected by cross-site scripti…6.1
• CVE-2017-1768IBM Security Guardium Big Data Intelligence (SonarG) 3.1 gen…4.3
• CVE-2017-17680In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was…