Vbulletin security patch for vbulletin 4 suite only - 11/04/2011

A recent vBulletin 4 (Suite Only, all versions) report indicated that there is a potential security exploit vector in the CMS portion of the product. To immediately fix the reported issue and strengthen vBulletin’s security - additional security was added to eliminate the reported threat.

The issue does not affect vBulletin 3.x, or vBulletin 4 Forum Classic.

To improve the security of your vBulletin 4 Suite installation please download the patch from the members area of vBulletin: http://members.vbulletin.com/
We recommend you install this security patch as soon as possible.

The upgrade process is the same as previous patch level releases - simply download the patch from the Members Area, extract the files and upload to your web server, overwriting the existing files. There is no upgrade script required.

(Advanced users: file updated is /packages/vbcms/dm/section.php)


Continue reading...

 

Good thing many of my clients don't use the CMS

 

Another day, another security patch...

 

On the bright side at least they are fixing these issues up fast. But then again it shouldn't be there in the first place.