calorie
05-01-2007, 12:50 AM
vbBux / vbPlaza is currently not available for download from the vBorg website. In February 2007, vBorg staff was notified of a potential XSS vulnerability in the vbBux / vbPlaza modification. We confirmed the exploit, along with additional exploits in varying degrees, and removed access to the original modification. A "fix" was then provided in April 2007, but as vBorg staff confirmed that the exploits were not corrected, access to the "fixed" modification was also removed. Read this (https://vborg.vbsupport.ru/info.php?do=security) for information on how vBorg staff handles exploitable modifications. Further, vBorg staff does not know when a correctly fixed version will be released. Read this and this for further information from the original author of the vbBux / vbPlaza modification. As previously stated, it is HIGHLY recommended that you disable/uninstall the vbBux / vbPlaza modification until a true fix is provided. Uninstall instructions can be found in this thread.