A number of vBulletin forums have been hacked recently.

[johnwhelan]

"Mr Hunt said the widely used vBulletin software was often not kept up to date by forum administrators leaving sites vulnerable to attack. Several recent breaches had all been traced back to vBulletin, he added."

One hopes that we are secure?

Thanks John

 

[oknotsen]

Version is listed at the bottom of the page. I could not be bothered to investigate what the more recent version is or what the weak version is. I doubt the value of what is listed here though as the installation here probably is modded to integrate it with Planet Auran.

 

[johnwhelan]

1. Remove the /install and /core/install directories in versions 4.x and 5.x respectively.
2. If you are not able to remove, so use block access or redirect requests that hit upgrade.php through via either a WAF, or via web server access configuration.

So as long as the password isn't used on another site it shouldn't be too bad.

How does one reset one's password?

Thanks John