Exploits in the Wild for vBulletin Pre-Auth RCE Vulnerability CVE-2020-17496
The exploits can bypass a earlier fixed vulnerability, allowing for attackers to mail a crafted HTTP ask for with a specified template name and destructive PHP code, and sales opportunities to remote code execution.