Vbulletin Exploits

[Erwin]

Then he is open to being hacked.

[Link14716]

Didn't he say he was on 2.2.9?

IIRC, there were no security fixes from 2.2.9 to 2.3.0.

[filburt1]

Jelsoft does not publish every security fix that is found for obvious reasons.

[Link14716]

Well yeah, but...

From the 2.3.0 Final announcement:
vBulletin 2.3.0 includes several bug-fixes although none of these are security related. (A list is included below, and in the announcements for the release candidate versions). This is now the 'stable' version of vBulletin for production use.

So I'd think 2.2.9 wouldn't have more or less security issues than 2.3.0. Of course, I could be wrong, like usual...

[EvilLS1]

Jelsoft did post which files were updated in 2.2.9 to fix the security exploits in 2.2.8. So I downloaded 2.2.9 and used a program similar to "beyond compare" (its called Quick Spot) to compare the effected files, then I made the necessary changes to my 2.2.8 files.. To me, this was easier than upgrading and having to reinstall all of my hacks.

[Logician]

Largest vbulletin exploits library in the world is hosted by vbulletin.com under name Bug Forums.

Jelsoft insists to keep that forum open to everybody in the world who has an internet connection (including non-customers) so if you want to find out the vb exploits you can do what malicious hackers do: go visit vbulletin.com.