CVE-2013-3528

high

Published 2013-05-10 · Modified 2026-04-29

CVSS v3

—

VIR risk

7.5

Description

Unspecified vulnerability in the update check in Vanilla Forums before 2.0.18.8 has unspecified impact and remote attack vectors, related to "object injection."

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

Application impact

Vendor	Product	Versions
vanillaforums	vanilla	`{"endIncluding":"2.0.18.7"}`
vanillaforums	vanilla	`2.0.1`
vanillaforums	vanilla	`2.0.2`
vanillaforums	vanilla	`2.0.3`
vanillaforums	vanilla	`2.0.4`
vanillaforums	vanilla	`2.0.5`
vanillaforums	vanilla	`2.0.6`
vanillaforums	vanilla	`2.0.7`
vanillaforums	vanilla	`2.0.8`
vanillaforums	vanilla	`2.0.9`
vanillaforums	vanilla	`2.0.10`
vanillaforums	vanilla	`2.0.11`
vanillaforums	vanilla	`2.0.12`
vanillaforums	vanilla	`2.0.13`
vanillaforums	vanilla	`2.0.14`
vanillaforums	vanilla	`2.0.15`
vanillaforums	vanilla	`2.0.16`
vanillaforums	vanilla	`2.0.16.1`
vanillaforums	vanilla	`2.0.17`
vanillaforums	vanilla	`2.0.17.1`
vanillaforums	vanilla	`2.0.17.2`
vanillaforums	vanilla	`2.0.17.3`
vanillaforums	vanilla	`2.0.17.4`
vanillaforums	vanilla	`2.0.17.5`
vanillaforums	vanilla	`2.0.17.6`
vanillaforums	vanilla	`2.0.17.7`
vanillaforums	vanilla	`2.0.17.8`
vanillaforums	vanilla	`2.0.17.9`
vanillaforums	vanilla	`2.0.17.10`
vanillaforums	vanilla	`2.0.18`
vanillaforums	vanilla	`2.0.18.1`
vanillaforums	vanilla	`2.0.18.3`
vanillaforums	vanilla	`2.0.18.4`
vanillaforums	vanilla	`2.0.18.5`
vanillaforums	vanilla	`2.0.18.6`

References

💬 Discuss CVE-2013-3528 on VIR Community →

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.