The tool below is able to encode a live exploit that can be used against vBulletin 5 sites. The user is able to execute php code into the any unpatched vBulletin 5.

[b]Site vulnerable example:[/b]

[code]

https://pitmaster.amazingribs.com

[/code]

[b]List of vBulletin 5 sites:[/b]

[code]

https://trends.builtwith.com/websitelist/vBulletin-5.x

[/code]

[b]Download 1:[/b]

https://filecrypt.cc/Container/75E1FDC40A.html

[b]Download 2:[/b]

https://www.file-upload.com/f9ppitfqk7z0

http://nitroflare.com/view/06455DDBED713B8/vBulletin_5_pre-auth_0day_RCE_exploit.rar