• Downloading from our site will require you to have a paid membership. Upgrade to a Premium Membership from 10$ a month today!

    Dont forget read our Rules! Also anyone caught Sharing this content will be banned. By using this site you are agreeing to our rules so read them. Saying I did not know is simply not an excuse! You have been warned.

Security Exploit Patched in versions 3.5, 3.6, 3.7, 3.8, 4.X, 5.X of vBulletin

Admin

Well-Known Member
Staff member
Administrator
A security issue has been found that affects all versions of vBulletin including 3.x, 4.x and 5.x. We have released security patches to account for this vulnerability. This includes patches for vBulletin 3.8.7, vBulletin 4.2.2 and all versions of vBulletin 5 (including Cloud accounts). The patch is also applied to vBulletin 5.1.0 RC1. It is imperative that you apply these patches as soon as possible.

Due to functionality changes, the minimum PHP version for the patch is 5.2.0. This represents an increase for vBulletin 3. Alternatively customers can install the JSON functions separately via http://pecl.php.net/package/json in which case it will work with any compatible PHP version that their particular version of vBulletin supports. You will need to collaborate with your hosting provider or systems administrator to apply the changes to PHP.

Patch for vBulletin 5.0.5 PL1
Patch for vBulletin 4.2.2 PL1
Patch for vBulletin 3.8.7 PL3
Patch for vBulletin 3.8.7 MAPI

Linked below are patch files so that you can manually update versions of vBulletin 3 and vBulletin 4 without a direct patch.
Please note, we have already applied this patch to all vBulletin Cloud sites.

Installing the Patch
Please install the patch for your version of vBulletin immediately.
  1. Upgrade PHP to the minimum version or install the JSON PECL, if necessary.
  2. Download the patch from https://members.vbulletin.com/patches.php.
  3. Extract the vBulletin patches files from the Zip file.
  4. Upload the patch files to your server, overwriting the old files.
As with all security related releases, we recommend all affected customers patch/upgrade as soon as possible.

If you're using an unpatched version of 3.X or 4.X, and you need to manually apply the DIFF patches please see these threads:
vBulletin 3.X
vBulletin 4.X

Frequently Asked Questions

Do I need to run the upgrade scripts?
No, you do not with this patch.

If I apply the patch to 3.8.7 or 4.2.2 do I need to mess with the DIFF files?
No, you do not.

How do I use the DIFF patch for my version?
Please see the thread linked above.

Will you release the details of this issue?
To allow our customers time to upgrade and apply the patch, we will not release any further details.
 

Facebook Comments

Similar threads
Thread starter Title Forum Replies Date
Admin vBulletin 4 Security Patch for Potential Yahoo! User Interface Library Exploit Khác 0
Admin Share bản quyền Avast Premium Security và Avast Cleanup đến năm 2031 Phần mềm 2
Admin XenForo 2.1.12 Released (Security Fix) Xenforo 0
Admin XenForo 2.2.1 Released (Includes Security Fix) Xenforo 0
cuongpro9x Share Kaspersky Endpoint Security 11 - Giấy phép 6 tháng miễn phí Phần mềm 2
dammechiase Phần mềm diệt virut miễn phí ESET Smart Security 12.0.31.0 + Key Premium mới nhất Trò chơi 0
Tornado - Bulletproof - Security - Tornado service - Hosting / Domain 4
dammechiase Tải Kaspersky Internet Security 2019 + Key Bản Quyền 1 Năm mới nhất Phần mềm 0
Admin XenForo 2.0.11 Released (Security Fix) Xenforo 0
Admin Hướng dẫn fix lỗi XSS trên Xenforo 2.0.9 - XenForo 2.0.9 Released (Security Fix) Xenforo 0
P Hướng dẫn [Reverse engineering tutorial] Hướng dẫn phá mật khẩu phần mềm Kakasoft USB Security 2.2 Thủ thuật máy tính 1
P Hướng dẫn cài đặt và sử dụng phần mềm USB Security Thủ thuật máy tính 0
Admin Bitdefender Internet Security 2016 miễn phí 6 tháng bản quyền Phần mềm 0
congtust24 Hướng dẫn [Nhanh tay] Đăng ký Kaspersky Internet Security 2015 và KSOS 2013 3 tháng miễn phí! Sử dụng, chia sẻ, hỏi đáp 0
style Share Cyber Security Essentials Kiến thức lập trình 0
congtust24 Nhanh tay nhận bản quyền 3 tháng Kaspersky Internet Security 2014 miễn phí Sử dụng, chia sẻ, hỏi đáp 0
Admin Bit Defender Internet Security 2014 và key 9 tháng Phần mềm 1
Admin Đăng ký Bitdefender Internet Security 2014 bản quyền 6 tháng Phần mềm 0
Admin Hướng dẫn mua key Kaspersky Internet Security cho android miễn phí Android, iOS 2
Admin YUI Security Issue found in uploader.swf Vbulletin 0
blog4me Thanh Lý 1 Thẻ BKAV Mobile Security Điện thoại di động 2
Admin vBulletin 5 Connect Security Patches Released (All versions) Vbb released 0
Admin Hướng dẫn sửa lỗi security token từ Firewall Protection Gateway Lite v0.4 Vbb tutorial 0
Admin Hướng dẫn khắc phục lỗi "Security Center service can't be started" Sử dụng, chia sẻ, hỏi đáp 0
Admin vBulletin 5 Security Patch: 5.0.2 PL1 Vbulletin 1
Admin Download USB Disk Security 6.3.0.10 Full Keygen - Chống virus lây nhiễm qua thẻ nhớ USB Phần mềm 2
T [S40-240x320] Super Bluetooth Hack Security Java 6
Admin Download Avira Internet Security 2013 full key dùng tới 2016 Phần mềm 0
Admin [ozzy47] Homeland Security Terror Alert Widget Vbb tutorial 0
Admin [ozzy47] Homeland Security Terror Alert Sideblock Vbb tutorial 0
Admin Share Key Avast Internet Security 8 Sử Dụng 2 Năm Sử dụng, chia sẻ, hỏi đáp 2
P Share Share Key kis bản quyền Kaspersky Internet Security 2013 Phần mềm 0
Admin Download Panda Internet Security 2013 Full Key - Miễn Phí Bản Quyền 6 Tháng Phần mềm 0
Admin Hướng dẫn sửa lỗi your current security settings do not allow this file to be downloaded Sử dụng, chia sẻ, hỏi đáp 3
V Anti virus Avast Internet Security [with License key] Phần mềm 0
Y Bkav mobile security bảo vệ smart phone theo cách chuyên nghiệp Android, ios, java, windows phone 0
S Bitdefender Windows 8 Security Phần mềm 0
Admin [Share] key avast! Internet Security mới tới năm 2014 Máy tính 0
Admin HTTP Anti Flood Security Gateway Module Chống local, attack, symlink, ddos 0
Admin Miễn phí ESET Mobile Security Android, ios, java, windows phone 0
Admin XenForo v1.1.2 Security Fixed PHP NULL-DGT Xenforo 0
K KingG Đã Chuyển Đổi Ứng Dụng Bkav Mobile Security Qua Jar Thanh Công!! =)) Java 0
Admin vBulletin Suite v4.2.0 Patch Level 2 Security Patch Only Vbb released 1
Admin [vbb4vn] vBulletin Forum v4.2.0 Patch Level 2 Security Patch Vbb released 0
K .htaccess security Chống local, attack, symlink, ddos 0
Admin USB Disk Security 6.1.0.432 Full Crack - Bảo vệ USB khỏi bị virus Phần mềm 0
Admin Anti virus share key avast! Internet Security mới tới năm 2014 Phần mềm 7
Admin XenForo 1.1.3 Released (Includes Security Fix) chưa NULL Xenforo 0
Admin XenForo 1.1.3 Released (Includes Security Fix) chưa NULL Xenforo 0
Admin [vbb4vn] vBulletin Forum v4.2.0 Patch Level 2 Security Patch Vbb released 0

Similar threads

New posts New threads New resources

Back
Top