CVE-2017-17671 — vBulletin through 5.3.x on Windows allows remote PHP code execution because a require_once call is reachable with an unauthenticated request that can include directory traversal sequences to specify a — CVE Database · The Intelligence Room