$ cve CVE-2013-3528 JSON

CVE-2013-3528 EXPLOIT

7.5

HIGH · CVSS 2.0 · EPSS 5.7% (pctl 93)

Patch early

A public exploit exists.

Description

Unspecified vulnerability in the update check in Vanilla Forums before 2.0.18.8 has unspecified impact and remote attack vectors, related to "object injection."

Scoring

CVSS	7.5 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS	5.67% — more likely to be exploited than 93% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2013-05-10
Last modified	2026-06-16

Affected (1)

Vendor	Product
vanillaforums	vanilla

Public exploits

Source	Title	Date
exploit-db	Vanilla Forums 2.0 < 2.0.18.5 - 'class.utilitycontroller.php' PHP Object Injection	2013-11-08

References

→ the Explorer · watch your stack · NVD