Re: Vulnerabilities in vBulletin ????
| From: | Richard Davey | Date: | Fri, 23 Apr 2004 19:31:49 +0000 |
| Subject: | Re: Vulnerabilities in vBulletin ???? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-184460@lists.php.net to get a copy of this message | ||
Hello Phpu,
Friday, April 23, 2004, 8:26:12 PM, you wrote:
P> I have vBulletin installed on my site. A few hours ago a
P> friend sent me a link to securityfocus.com.
P> There, it is said that if i have vBulletin installed i could be vulnerable.
P> Here the script shown on the site....
[snip]
P> The only problem that i have is that i do not know what the script does and how it works.
It shows how it's possible to insert potentially malicious code via an
XSS attack and the register.php script.
P> PS: How can i get rid of this?
vBulletin is commercial, right? So time to use the support package
you've gone and paid for!
--
Best regards,
Richard Davey
http://www.phpcommunity.org/wiki/296.html