Possibility of vbulletin leaking user email addresses?

[tobias_t]

Hi there,

We have a forum user complaining that an email account that he created exclusively for his forum account is suddenly receiving spam. He is now accusing us of leaking email addresses (which we of course don't do).

Is there any chance that email addresses can be harvested from vbulletin forum accounts through some kind of exploit? We are currently runnning 3.6.5, and ran 3.6.3 for quite some time before that.

Thanks for any help, Tobias

[Dismounted]

You're a few releases behind the latest stable (3.6.8 PL2). I suggest that you update ASAP.

If an exploit was discovered and reported, it would've been fixed. So at this point in time, the vBulletin team don't know of any exploits. Also, it may not be vBulletin, but one of your modifications.

[ssslippy]

Id like to point places like hotmail etc will sell your email addy with no problem.