vBulletin Security Patch for vBulletin 4.1.4 - 4.1.11 for Suite & Forum - 03/23/2012

Discussion in 'vBulletin Discussions' started by News Bot, Mar 27, 2012.

  1. News Bot

    News Bot Regular Member

    Joined:
    Apr 28, 2011
    Messages:
    429
    Likes Received:
    63
    Location:
    Cyber Space
    A recent vBulletin 4 (4.1.4 - 4.1.11 Suite & Forum) report indicated that there was a potential XSS exploit vector in the editor. Once the cause of the issue was isolated, code changes were made to eliminate the reported threat.

    The issue does not affect vBulletin 3.x and vBulletin 4.0 - 4.1.3.

    This patch has been issued for vBulletin 4.1.4 through 4.1.11.

    To improve the security of your vBulletin 4 Suite installation please download the patch from the members area of vBulletin: http://members.vbulletin.com/
    We recommend you install this security patch as soon as possible.

    The upgrade process is the same as previous patch level releases - simply download the patch from the Members Area, extract the files and upload to your web server, overwriting the existing files. There is no upgrade script required.

    Advanced Users - Files updated in the patch are:
    • includes/version_vbulletin.php
    • clientscript/ckeplugins/bbcode/plugin.js (if js uncompressed)
    • clientscript/ckeditor/ckeditor.js" (if js compressed)

    Please note that this issue and fix affects BOTH vBulletin SUITE and FORUM.

    Continue reading...
     
  2. Iconic

    Iconic The Original

    Joined:
    Nov 2, 2011
    Messages:
    353
    Likes Received:
    135
    Location:
    Australia
  3. Brandon

    Brandon Regular Member

    Joined:
    Jun 1, 2009
    Messages:
    6,602
    Likes Received:
    1,706
    Location:
    Topeka, Kansas
    First Name:
    Brandon
  4. Brandon

    Brandon Regular Member

    Joined:
    Jun 1, 2009
    Messages:
    6,602
    Likes Received:
    1,706
    Location:
    Topeka, Kansas
    First Name:
    Brandon
    hmm.. this is reassuring... "just ignore it"....lol

     
  5. Iconic

    Iconic The Original

    Joined:
    Nov 2, 2011
    Messages:
    353
    Likes Received:
    135
    Location:
    Australia
    They obviously did a rush job. lol
     
  6. Brandon

    Brandon Regular Member

    Joined:
    Jun 1, 2009
    Messages:
    6,602
    Likes Received:
    1,706
    Location:
    Topeka, Kansas
    First Name:
    Brandon
    That's what I was thinking as well. :confused:
     
  7. Dan Hutter

    Dan Hutter aka Big Dan

    Joined:
    Jul 20, 2006
    Messages:
    1,412
    Likes Received:
    515
    Location:
    New York
    Since when is that news? lol
     
    Iconic likes this.
  8. Brandon

    Brandon Regular Member

    Joined:
    Jun 1, 2009
    Messages:
    6,602
    Likes Received:
    1,706
    Location:
    Topeka, Kansas
    First Name:
    Brandon
    Well either way I have some vb work lined up for this weekend so Keep up the good work inet :D
     
    cpvr and Dan Hutter like this.

Share This Page