Reporting a vulnerability in a no longer supported modification

[jh1711]

Hello Guys,

I have the following dilemma. I'm reasonably certain that a modification hosted on vbulletin.org is vulnerable to an SQL injection. I don't have a vB license atm., and can't verify if the latest version is vulnerable. But the mod hasn't been updated in years; I'd bet it still is vulnerable.

Any advice on how I can inform the people using the mod about the problem is appreciated.

Thank you

[kh99]

Are you able to use the report button? If so, use that and tell us what you think the problem is (and what version you have, if you know).

[jh1711]

Yes.

Let me know if the information wasn't enough. The hook code isn't long.

Edit: I think I need to use a second report to give more details. Gonna take a few minutes.