Webmaster Forum

Go Back   Webmaster Forum > Web Development > Forum Management

Forum Management Discuss forum management topics including forum software, mods & plugins, developing high quality interactive communities, advertising revenue, forum security, dealing with spam, and more. Ideal for forum owners, administrators, and moderators.


Closed Thread
 
Thread Tools Display Modes
Share |
  #1  
Old 08-28-2013, 06:38 AM
snakeair snakeair is offline
Super Moderator - Rest in Peace 2018
 
Join Date: 12-31-07
Location: Medford, NJ
Posts: 54,771
iTrader: 3 / 100%
Potential vBulletin Exploit (4.1+ and 5+)

Read this vBulletin Admin's.

Quote:
The vBulletin team just posted a pre disclosure warning on their announcements forum about a possible exploit on VBulletin 4.1+ and 5+ versions.

They donít provide much details, except that webmasters need to remove the /install and /core/install from their sites. This is the full message:
Continued at: http://blog.sucuri.net/2013/08/poten...4-1-and-5.html
 

Advertisement

Advertisement

  #2  
Old 08-30-2013, 06:11 AM
dWhite dWhite is offline
Contributing Member
 
Join Date: 09-28-08
Posts: 4,338
iTrader: 5 / 100%
Probably has to do with the script not properly locking the /install or /core/install like most forum software does, so any random person could goto somewebsite.com/install and start the installation process effectively terminating your control and your forum.

I know SMF and MyBB both lock their installers, but it's always a good idea to delete the installation part of the script after no matter what forum software you use.
 
  #3  
Old 10-11-2013, 04:35 AM
EthernetServers EthernetServers is offline
Junior Member
 
Join Date: 10-05-13
Posts: 26
iTrader: 0 / 0%
vBulletin is a train-wreck in terms of security. I would never trust it as a forum software platform. I don't like their business ethics, either. The release tiers are incredibly messy as well.
 
  #4  
Old 10-11-2013, 08:08 AM
snakeair snakeair is offline
Super Moderator - Rest in Peace 2018
 
Join Date: 12-31-07
Location: Medford, NJ
Posts: 54,771
iTrader: 3 / 100%
Vbulletin has recently updated there version with bug fix's and new features. See the news on there forum.

http://www.vbulletin.com/forum/forum...ed#post4000121

Start a thread if you wish to discuss about this recent upgrade.
 
Go Back   Webmaster Forum > Web Development > Forum Management

Closed Thread


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Use Internet Explorer 8? Youíll Want This Zero-Day Exploit Fix snakeair Tech Talk 3 01-04-2013 04:06 AM
How Affiliate Sites Can Best Exploit SEO snakeair Affiliate Marketing Forum 8 06-01-2012 06:44 AM
Free Blogs With PR - WPMU Exploit Resurrection Blogging Forum 4 09-24-2007 07:19 AM
vBulletin 3.0.X exploit fishfreek Web Hosting Forum 0 02-14-2005 12:14 PM
Does Google exploit voluntary translators? astrab Google Forum 0 10-22-2004 07:16 AM


V7N Network
Get exposure! V7N I Love Photography V7N SEO Blog V7N Directory


All times are GMT -7. The time now is 05:10 AM.
Powered by vBulletin
Copyright © 2000-2014 Jelsoft Enterprises Limited.
Copyright © 2003 - 2018 VIX-WomensForum LLC