0-Day Flaws in Vanilla Forums Let Remote Attackers Hack Websites

A security researcher has publicly disclosed two critical zero-day vulnerabilities in Vanilla Forums, an open source software that powers discussion on over 500,000 websites, which could allow unauthenticated, remote attackers to fully compromise targe… Continue reading 0-Day Flaws in Vanilla Forums Let Remote Attackers Hack Websites

Vanilla Forums Software Vulnerable to RCE, Host Header Injection Vulnerability

Vanilla Forums software suffers from vulnerabilities that could let an attacker gain access to user accounts, carry out web-cache poisoning attacks, and in some instances, execute arbitrary code. Continue reading Vanilla Forums Software Vulnerable to RCE, Host Header Injection Vulnerability

Vanilla Forums Software Vulnerable to RCE, Host Header Injection Vulnerability

Vanilla Forums software suffers from vulnerabilities that could let an attacker gain access to user accounts, carry out web-cache poisoning attacks, and in some instances, execute arbitrary code. Continue reading Vanilla Forums Software Vulnerable to RCE, Host Header Injection Vulnerability