Read the docs
TI-2013-03085 Aliases CVE-2013-3528GHSA-32jx-75mj-c5hj

Unspecified vulnerability in the update check in Vanilla Forums before 2.0.18.8 has…

Priority MEDIUM 41Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Unspecified vulnerability in the update check in Vanilla Forums before 2.0.18.8 has unspecified impact and remote attack vectors, related to "object injection."

Why it matters now

EPSS 0.05667 93rd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 42

CPEVersionsRoleVendor
cpe:2.3:a:vanillaforums:vanilla:*:*:*:*:*:*:*:*up to 2.0.18.7VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.1:*:*:*:*:*:*:*2.0.1VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.2:*:*:*:*:*:*:*2.0.2VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.3:*:*:*:*:*:*:*2.0.3VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.4:*:*:*:*:*:*:*2.0.4VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.5:*:*:*:*:*:*:*2.0.5VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.6:*:*:*:*:*:*:*2.0.6VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.7:*:*:*:*:*:*:*2.0.7VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.8:*:*:*:*:*:*:*2.0.8VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.9:*:*:*:*:*:*:*2.0.9VulnerableVanilla
  • cpe:2.3:a:vanillaforums:vanilla:*:*:*:*:*:*:*:* Versions up to 2.0.18.7 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.1:*:*:*:*:*:*:* Versions 2.0.1 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.2:*:*:*:*:*:*:* Versions 2.0.2 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.3:*:*:*:*:*:*:* Versions 2.0.3 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.4:*:*:*:*:*:*:* Versions 2.0.4 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.5:*:*:*:*:*:*:* Versions 2.0.5 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.6:*:*:*:*:*:*:* Versions 2.0.6 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.7:*:*:*:*:*:*:* Versions 2.0.7 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.8:*:*:*:*:*:*:* Versions 2.0.8 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.9:*:*:*:*:*:*:* Versions 2.0.9 Vulnerable ·Vanilla
Show 32 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:vanillaforums:vanilla:2.0.10:*:*:*:*:*:*:*2.0.10VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.11:*:*:*:*:*:*:*2.0.11VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.12:*:*:*:*:*:*:*2.0.12VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.13:*:*:*:*:*:*:*2.0.13VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.14:*:*:*:*:*:*:*2.0.14VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.15:*:*:*:*:*:*:*2.0.15VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.16:*:*:*:*:*:*:*2.0.16VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.16.1:*:*:*:*:*:*:*2.0.16.1VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.17:*:*:*:*:*:*:*2.0.17VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.17.1:*:*:*:*:*:*:*2.0.17.1VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.17.2:*:*:*:*:*:*:*2.0.17.2VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.17.3:*:*:*:*:*:*:*2.0.17.3VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.17.4:*:*:*:*:*:*:*2.0.17.4VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.17.5:*:*:*:*:*:*:*2.0.17.5VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.17.6:*:*:*:*:*:*:*2.0.17.6VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.17.7:*:*:*:*:*:*:*2.0.17.7VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.17.8:*:*:*:*:*:*:*2.0.17.8VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.17.9:*:*:*:*:*:*:*2.0.17.9VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.17.10:*:*:*:*:*:*:*2.0.17.10VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.18:*:*:*:*:*:*:*2.0.18VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.18:alpha3:*:*:*:*:*:*2.0.18 alpha3VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.18:beta1:*:*:*:*:*:*2.0.18 beta1VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.18:beta2:*:*:*:*:*:*2.0.18 beta2VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.18:beta4:*:*:*:*:*:*2.0.18 beta4VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.18:rc1:*:*:*:*:*:*2.0.18 rc1VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.18:rc2:*:*:*:*:*:*2.0.18 rc2VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.18:rc3:*:*:*:*:*:*2.0.18 rc3VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.18.1:*:*:*:*:*:*:*2.0.18.1VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.18.3:*:*:*:*:*:*:*2.0.18.3VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.18.4:*:*:*:*:*:*:*2.0.18.4VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.18.5:*:*:*:*:*:*:*2.0.18.5VulnerableVanilla
cpe:2.3:a:vanillaforums:vanilla:2.0.18.6:*:*:*:*:*:*:*2.0.18.6VulnerableVanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.10:*:*:*:*:*:*:* Versions 2.0.10 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.11:*:*:*:*:*:*:* Versions 2.0.11 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.12:*:*:*:*:*:*:* Versions 2.0.12 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.13:*:*:*:*:*:*:* Versions 2.0.13 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.14:*:*:*:*:*:*:* Versions 2.0.14 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.15:*:*:*:*:*:*:* Versions 2.0.15 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.16:*:*:*:*:*:*:* Versions 2.0.16 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.16.1:*:*:*:*:*:*:* Versions 2.0.16.1 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.17:*:*:*:*:*:*:* Versions 2.0.17 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.17.1:*:*:*:*:*:*:* Versions 2.0.17.1 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.17.2:*:*:*:*:*:*:* Versions 2.0.17.2 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.17.3:*:*:*:*:*:*:* Versions 2.0.17.3 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.17.4:*:*:*:*:*:*:* Versions 2.0.17.4 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.17.5:*:*:*:*:*:*:* Versions 2.0.17.5 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.17.6:*:*:*:*:*:*:* Versions 2.0.17.6 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.17.7:*:*:*:*:*:*:* Versions 2.0.17.7 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.17.8:*:*:*:*:*:*:* Versions 2.0.17.8 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.17.9:*:*:*:*:*:*:* Versions 2.0.17.9 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.17.10:*:*:*:*:*:*:* Versions 2.0.17.10 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.18:*:*:*:*:*:*:* Versions 2.0.18 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.18:alpha3:*:*:*:*:*:* Versions 2.0.18 alpha3 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.18:beta1:*:*:*:*:*:* Versions 2.0.18 beta1 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.18:beta2:*:*:*:*:*:* Versions 2.0.18 beta2 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.18:beta4:*:*:*:*:*:* Versions 2.0.18 beta4 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.18:rc1:*:*:*:*:*:* Versions 2.0.18 rc1 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.18:rc2:*:*:*:*:*:* Versions 2.0.18 rc2 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.18:rc3:*:*:*:*:*:* Versions 2.0.18 rc3 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.18.1:*:*:*:*:*:*:* Versions 2.0.18.1 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.18.3:*:*:*:*:*:*:* Versions 2.0.18.3 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.18.4:*:*:*:*:*:*:* Versions 2.0.18.4 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.18.5:*:*:*:*:*:*:* Versions 2.0.18.5 Vulnerable ·Vanilla
  • cpe:2.3:a:vanillaforums:vanilla:2.0.18.6:*:*:*:*:*:*:* Versions 2.0.18.6 Vulnerable ·Vanilla

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-3528
  2. 2026-10-03 Alias added: GHSA-32jx-75mj-c5hj

References

Exploit 1

Advisory 1

  • TI-2016-08157 The from method in library/core/class.email.php in Vanilla Forums before 2.3.1 allows… CVSS 3.0HIGH 7.5
  • TI-2018-13393 Vanilla 2.6.x before 2.6.4 allows remote code execution. CVSS 3.0CRITICAL 9.8
  • TI-2011-03188 An Access Control vulnerability exists in the Facebook, Twitter, and Embedded plugins in Vanilla Forums before 2.0.17.9. CVSS 3.1CRITICAL 9.8
  • TI-2013-03084 Multiple SQL injection vulnerabilities in Vanilla Forums before 2.0.18.8 allow remote… CVSS 2.0HIGH 7.5
  • TI-2018-13806 Vanilla before 2.5.5 and 2.6.x before 2.6.2 allows Remote Code Execution because… CVSS 3.0HIGH 7.2
  • TI-2011-03187 An issue exists in Vanilla Forums before 2.0.17.9 due to the way cookies are handled. CVSS 3.1HIGH 7.5
See all 18 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences