I have applied the fix posted here ;

https://vborg.vbsupport.ru/showpost....&postcount=250

To both versions (3.5 was done in July, the unofficial 3.6 version today).

AFAIK, this fixes the problem you are referring to.

thank you Paul ..

One more thing I hope if you replace the first post attached .zip file with your patched one .

The main zip (for 3.5) was patched in July.

Hello Everyone,

I understand there is a security vulnerability - http://www.vbulletin.com/forum/showthread.php?t=198902, were we are being told to uninstall Top X Stats.

I would rather keep this mod so I am wondering if this issue has been addressed. I see from previous posts that there has been some security issues addressed but no sure if it is this one.

I am running vb 3.5.4 and Top X Stats 1.2.1a

Is there something I need to do here to get the most secure version for vb 3.5.4.?


Thank You,


Nuguru :)

I was in the process of disabling this since I followed your link about security and I got a new user on my forum named ANTHRAX.

Then the user posted "hacked by ANTHRAX" for their one and only post.

thanx paul!

Does that code work for 3.5.2 and 3.5.4 boards ? as my 3.5.2 one got hacked but i have added a new code in newthread.php taken from vb forum after i got my site back.

hmm teepeg would that be what i posted?

Hello,

It's a shame to hear that we are incountering a security problem with Top X Stats and I am in the process of finding the solution to ensure that 1.6.1a is secure for my vb 3.5.4. Any help would be appreciated.

In addition, I was wondering if there has been any recent security issues with VBStatExtended since it seems to be a very similar mod to Top X Stats?


Thanks in Advance,

Nuguru :)

<a href="https://vborg.vbsupport.ru/showpost.php?p=1066969&postcount=6" target="_blank">https://vborg.vbsupport.ru/showp...69&postcount=6</a> read that man