[Critical] New vBulletin 5 SQL Injection

It's why I asked before could this not have something to do with you using a Windows Server. Maybe patch is not tested with that, no idea and just a thought?

Not sure if Mark.B has installed the patch on his test board or not, he's not posted he has done on it.

 

There is still very much a need for forums. It offers a degree of anonymity that social media sites don't offer in general.

 

Anonymity is like a gun. It is only bad, when the user uses it improperly.

Scott

 

Others have been having troubles with the patch, first bug report on vb.com
http://www.vbulletin.com/forum/foru...questions/4100462-5-1-2-security-patch-issues

Sounds like you was lucky if it worked on 5.1.2 Bob

 

Someone that had similar on vb com had fixed their problem
http://www.vbulletin.com/forum/foru...2-security-patch-issues?p=4101651#post4101651

 

So they are going to need a patch for the patch and then another patch for the patch.

 

It is painfully embarrassing, yet.......no one is embarrassed. That is, in itself, a huge problem.

Scott

 

Damn, almost missed another patch that was released today
http://www.vbulletin.com/forum/foru...lletin-5-connect-versions-5-0-0-through-5-1-2

 

Wow. They really don't understand security. It's technically called "Cross Site Request Forgery" not cross site forgery request......... (they switched forgery and request around)

 

Looking at the patches, it don't look good

Bugs are being found now, but they have been in all the versions until now

 

Does anyone know if it works on Windows Servers?

 

I don't know w hy you would say they would warn anyone. They have promoted this piece of crap as the latest and greatest since day one and never warned anyone vB5 would effectively make your board unusable. Why would you think they would start warning us now?

 

Looking on the bright side, loads of new bugs have come to light with the patches
So 5.1.3 should be an even more solid release

 

There are not enough cans of RAID in the world to deal with the number of bugs in vBulletin.

 

Yeah, when they start to only think about a new feature, new bugs seem to pop out of the woodwork.

Scott

 

Why do i have a feeling that many issues are still not discovered, so many bug reporters went to WBB, XF and IPB with their sites.

 

Someone else reported a similar problem and it was the admin password had reached it changing period
http://www.vbulletin.com/forum/foru...pport-issues-questions/4104055-critical-error