{
  "schema_version": "1.4.0",
  "id": "GHSA-rj2v-jjj7-r36g",
  "modified": "2022-05-17T04:57:44Z",
  "published": "2022-05-17T04:57:44Z",
  "aliases": [
    "CVE-2013-6129"
  ],
  "details": "The install/upgrade.php scripts in vBulletin 4.1 and 5 allow remote attackers to create administrative accounts via the customerid, htmldata[password], htmldata[confirmpassword], and htmldata[email] parameters, as exploited in the wild in October 2013.",
  "severity": [],
  "affected": [],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-6129"
    },
    {
      "type": "WEB",
      "url": "http://www.net-security.org/secworld.php?id=15743"
    },
    {
      "type": "WEB",
      "url": "http://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/3991423-potential-vbulletin-exploit-vbulletin-4-1-vbulletin-5"
    }
  ],
  "database_specific": {
    "cwe_ids": [],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2013-10-19T10:36:00Z"
  }
}