← Back to CVE List
CVE-2015-3419
vBulletin 5.x through 5.1.6 allows remote authenticated users to bypass authorization checks and inject private messages into conversations via vectors related to an input validation failure.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt