Good thing I migrated from UBBThreads in time....

[MPDev]

Yesterday the Turkish cracker going by the handle "Iskorpitx", successfully hacked 21,549 websites in one shot (plus 17,000 as our last update) and defaced (on a secondary page) all of them with a message showing the Turkish flag (with AtaTurk face on it) and reporting:

"HACKED BY iSKORPiTX
(TURKISH HACKER)

Wouldn't you know we reported these problems years ago and now the customers are paying the price. Users reporting their servers have been hacked and compromised with various processes and scripts added.

For those of you who critize vB for releasing security updates as soon as they encounter them, this is why its important to have timely reponses.

[AWS]

You have to consider the fact that threads is coded by one person while vbulletin is done by a team.
None the less exploits from threads perl version are still exploitable in the php version. Until threads is rewritten from the ground up these exploits will exist. Not to mention that there is an exploit that is 2 years old that still isn't fixed even after the fix was submitted to Rick. There is one that is over 5 years old that existed in wwwthreads perl v3.5 and is still exploitable in 6.5.4.

[Romeos Tune]

I had a similar problem like this too. I quite threads a long time ago but left the software on the server. One day I get an e-mail from abuse saying I was running a phishing site and guess what... It was in the ubbthreads directory.... grrrrrrrrrr