vBulletin Security Patch for vBulletin 4 Suite Only - 11/04/2011

[vB.Org System]

A recent vBulletin 4 (Suite Only, all versions) report indicated that there is a potential security exploit vector in the CMS portion of the product. To immediately fix the reported issue and strengthen vBulletin?s security - additional security was added to eliminate the reported threat.

The issue does not affect vBulletin 3.x, or vBulletin 4 Forum Classic.

To improve the security of your vBulletin 4 Suite installation please download the patch from the members area of vBulletin: http://members.vbulletin.com/
We recommend you install this security patch as soon as possible.

The upgrade process is the same as previous patch level releases - simply download the patch from the Members Area, extract the files and upload to your web server, overwriting the existing files. There is no upgrade script required.

(Advanced users: file updated is /packages/vbcms/dm/section.php)


More...