Activity Stream
Quick Links
48,167 MEMBERS
62057 ONLINE
Register Now
besthostingforums On YouTube Subscribe to our Newsletter besthostingforums On Twitter besthostingforums On Facebook besthostingforums On facebook groups

Page 1 of 2 12 LastLast
Results 1 to 10 of 14
  1. 8th Oct 2009, 04:33 PM
        
    #1
    Storming is offline
    OP
    Storming
    Member

    Default Security patch released for latest vbulletin

    This affects the following releases:vBulletin 3.8.4 PL1 / 3.7.6 PL1 / 3.6.12 PL2

    An XSS flaw within the user profile page has recently been discovered. This could allow an attacker to carry out an action as a user or obtain access to a user's account. To resolve this issue, it has been necessary to release a patch level version of the active versions of vBulletin.

    The upgrade process is the same as previous patch level releases - simply download the patch from the Members Area, extract the files and upload to your webserver, overwriting the existing files. There is no upgrade script required.

    As with all security-based releases, we recommend that all customers upgrade as soon as possible in order to prevent any potential damage resulting from the flaw being exploited.

    Source: Vbulletin.com

    I would suggest people start upgrading now.
    Storming Reviewed by Storming on . Security patch released for latest vbulletin This affects the following releases:vBulletin 3.8.4 PL1 / 3.7.6 PL1 / 3.6.12 PL2 Source: Vbulletin.com I would suggest people start upgrading now. Rating: 5
    It's amazing, being in a community can cause hate. Competitors or not - DDOS isn't cool :)
    Reply With QuoteRegister To Reply Ping this articlePing

    2.   Sponsored Links

  2. 8th Oct 2009, 04:34 PM
        
    #2
    DEViANCE is offline
    DEViANCE
    Member
    Website's: 
    
zomgbbqpizza.com
evilddl.com
scenemarket.org
    LOL, they finally found it then...


    IPB FTW
    Reply With QuoteRegister To Reply
  3. 8th Oct 2009, 04:35 PM
        
    #3
    Storming is offline
    OP
    Storming
    Member
    * vBulletin 3.8.3
    Really hope This site patches up..
    It's amazing, being in a community can cause hate. Competitors or not - DDOS isn't cool :)
    Reply With QuoteRegister To Reply
  4. 8th Oct 2009, 04:37 PM
        
    #4
    DXS is offline
    DXS
    Member
    Website's: 
    
awfuck.it
    Did they serious find this just now? Wow...now they have to find the one in the memberlist page haha.
    "People that walk, need to learn how to sound like a book from the age of movies that has routers, then you can change the wall color, if you truly believe in food."
    - el_jentel1 (Link to quote)
    I love esotorisk and st0ne <3
    http://www.formspring.me/iamgodhimself - Ask me anything!
    Reply With QuoteRegister To Reply
  5. 8th Oct 2009, 04:38 PM
        
    #5
    -Im.z2ight- is offline
    -Im.z2ight-
    Member
    Website's: 
    
FlowForums.com
    They alway fix the patches and this site might want to get up to date.
    Reply With QuoteRegister To Reply
  6. 8th Oct 2009, 04:41 PM
        
    #6
    Hawk is offline
    Hawk
    Respected Developer
    That reminds me, I need to tell Izzy to update InWarez (That's whenever he's back).

    Reply With QuoteRegister To Reply
  7. 8th Oct 2009, 05:00 PM
        
    #7
    Loget is offline
    Loget
    Respected Member
    Its not specifically versions 3.8.4, 3.7.6, 3.6.12 that are affected, all versions are, for example if you are running 3.8.2 or 3.7.5 etc you are vulnerable and need to update to the latest version.

    To resolve this issue, it has been necessary to release a patch level version of the active versions of vBulletin.
    That is why the patch was released across all there active versions, the older versions are probably vulnerable also but they have stopped updating those so if your running those you need to manually do it, vBulletin and XSS are like bread and butter just can't keep them apart.
    Reply With QuoteRegister To Reply
  8. 8th Oct 2009, 05:29 PM
        
    #8
    William Palmer is offline
    William Palmer
    Banned
    Website's: 
    
Dev-Security.net
    another reason why i use IPB even tho i dont know shit about it but that is besides the point lol
    Reply With QuoteRegister To Reply
  9. 9th Oct 2009, 03:08 AM
        
    #9
    Hyperz is offline
    Hyperz
    Respected Developer
    Quote Originally Posted by Hawk View Post
    That reminds me, I need to tell Izzy to update InWarez (That's whenever he's back).
    If he still has enough space left on his shared hosting...
    Reply With QuoteRegister To Reply
  10. 9th Oct 2009, 04:12 AM
        
    #10
    -Im.z2ight- is offline
    -Im.z2ight-
    Member
    Website's: 
    
FlowForums.com
    3.8.4 PL1 / 3.7.6 PL1 / 3.6.12 PL2 these are the new releases not the affected versions. They have 3.6 stable usable addition for people who don't want to move up to 3.7 or 3.8
    Reply With QuoteRegister To Reply
Page 1 of 2 12 LastLast
« Previous Thread | Next Thread »

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. WHMCS Security Patch Released!
    By Rox in forum Hosting Discussion
    Replies: 11
    Last Post: 7th Jun 2012, 01:14 AM
  2. Security Patch for WHMCS released.
    By Exel in forum News & Current Events
    Replies: 1
    Last Post: 29th May 2012, 08:17 PM
  3. WHMCS Security Exploit+Patch
    By Glenn in forum News & Current Events
    Replies: 6
    Last Post: 8th Dec 2011, 01:59 AM
  4. WHMCS Security Patch
    By robert420 in forum Hosting Discussion
    Replies: 0
    Last Post: 3rd Dec 2011, 02:04 AM
  5. WHMCS 4.X Security Patch
    By Cory in forum News & Current Events
    Replies: 0
    Last Post: 15th Jun 2011, 07:57 AM

Tags for this Thread

BE SOCIAL
FAQ | SITEMAP
Copyright ® 2008 - 2015 besthostingforums.com
Copyright © 2013 vBulletin Solutions, Inc. All rights reserved.
BestHostingForums.com is a great place to learn about Internet Marketing Online, SEO Techniques, Search Engine Marketing and resources for Web Development.