Go Back   vb.org Archive > vBulletin 4 Discussion > vB4 Programming Discussions
  #1  
Old 03-24-2015, 08:02 PM
tanzeelniazi tanzeelniazi is offline
 
Join Date: Apr 2012
Posts: 375
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default Forum Runner xploit

Hello all
I want to know can i delete Forumrunner folder ? if i dlete this any damage happen to my forum ?

example
Code:
http://[path]/forumrunner/include/album.php
Reply With Quote
  #2  
Old 03-24-2015, 08:08 PM
ForceHSS ForceHSS is offline
 
Join Date: Apr 2008
Posts: 6,357
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

remove xml then all files if you miss any it will bring errors. But you would be best to just disable the plugin
Reply With Quote
  #3  
Old 03-24-2015, 08:10 PM
tanzeelniazi tanzeelniazi is offline
 
Join Date: Apr 2012
Posts: 375
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

can you tell me which XML file please ?
and which plugins i need to disable ? you mean all plugins ?

--------------- Added [DATE]1427231612[/DATE] at [TIME]1427231612[/TIME] ---------------

I see in products and i already have disable forum runner . can i uninsatall first ? after delete the complete forum runner folder ?
Reply With Quote
  #4  
Old 03-24-2015, 08:23 PM
Elite_360_'s Avatar
Elite_360_ Elite_360_ is offline
 
Join Date: Nov 2012
Location: New Hampshire
Posts: 518
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

I don't think They’re any exploits in Forum Runner if their where Vbulletin would have a patch for that.
Reply With Quote
  #5  
Old 03-24-2015, 08:24 PM
tanzeelniazi tanzeelniazi is offline
 
Join Date: Apr 2012
Posts: 375
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

i dont want to upgrade my forum because some mod working and i know if i upgrade my mods are not working see this
PHP Code:
http://1337day.com/exploit/19874 
Reply With Quote
  #6  
Old 03-24-2015, 08:25 PM
ForceHSS ForceHSS is offline
 
Join Date: Apr 2008
Posts: 6,357
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by tanzeelniazi View Post
can you tell me which XML file please ?
and which plugins i need to disable ? you mean all plugins ?

--------------- Added 24 Mar 2015 at 21:13 ---------------

I see in products and i already have disable forum runner . can i uninsatall first ? after delete the complete forum runner folder ?
Just disable forum runner it will do it will stop it being used
Reply With Quote
  #7  
Old 03-24-2015, 08:29 PM
tanzeelniazi tanzeelniazi is offline
 
Join Date: Apr 2012
Posts: 375
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Force sir forum runner is already disable
When i put my forum link here
Code:
http://[path]/forumrunner/include/album.php
path field i see my home page is open and i dont know if home open its mean someone can hack me or if showing error then he can hack me
but my forum main page is open
Reply With Quote
  #8  
Old 03-24-2015, 08:31 PM
ForceHSS ForceHSS is offline
 
Join Date: Apr 2008
Posts: 6,357
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Only if there is an exploit with it and I know of none. If you know of one report it to vbulletin support
Reply With Quote
  #9  
Old 03-24-2015, 08:38 PM
Elite_360_'s Avatar
Elite_360_ Elite_360_ is offline
 
Join Date: Nov 2012
Location: New Hampshire
Posts: 518
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Well make a backup of the files and database of your site then uninstall Forum Runner then delete the Forum Runner folder.

--------------- Added [DATE]1427233167[/DATE] at [TIME]1427233167[/TIME] ---------------

The backup for in case you get any errors after uninstalling Forum Runner.
Reply With Quote
Благодарность от:
tanzeelniazi
  #10  
Old 03-26-2015, 08:01 AM
cellarius's Avatar
cellarius cellarius is offline
 
Join Date: Aug 2005
Posts: 1,987
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by Elite_360_ View Post
I don't think They?re any exploits in Forum Runner if their where Vbulletin would have a patch for that.
Why should they? vBulletin does not develop Forumrunner.

Quote:
Originally Posted by ForceHSS View Post
Only if there is an exploit with it and I know of none. If you know of one report it to vbulletin support
They'll probably tell you to report it at the proper place, i.e. the forumrunner support.

Anyway, since there hasn't been a new version of FR since 2013, the FR support forum is flooded with spam, and Zachery, who seemed to duplicate as FR support just has left vB, I find your optimism about the continuing safety of FR somewhat astonishing.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 08:27 PM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2024, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.04236 seconds
  • Memory Usage 2,252KB
  • Queries Executed 13 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (2)bbcode_code
  • (1)bbcode_php
  • (3)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (10)post_thanks_box
  • (1)post_thanks_box_bit
  • (10)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (1)post_thanks_postbit
  • (10)post_thanks_postbit_info
  • (10)postbit
  • (10)postbit_onlinestatus
  • (10)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_postinfo_query
  • fetch_postinfo
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • fetch_musername
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • post_thanks_function_fetch_thanks_bit_start
  • post_thanks_function_show_thanks_date_start
  • post_thanks_function_show_thanks_date_end
  • post_thanks_function_fetch_thanks_bit_end
  • post_thanks_function_fetch_post_thanks_template_start
  • post_thanks_function_fetch_post_thanks_template_end
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete