vbBux & vbPlaza Removal

[AuroraStorm]

I don't hold anyone responsible. My entire site was destroyed but shite happens. It's an unfortunate thing and lessons are learned behind it. It could have been worse because I didn't delete anything and was able to rebuild my site quickly thanks to my buddy Willy so I'm thankful to have the foresight not to delete any of the images and skinz that I uploaded. I usually check this site often and I was surprised someone didn't alert to the problem sooner or maybe they did and I missed it. The hack was, next to the Arcade, the most popular thing on my board and it's missed and hopefully CMX will come back (and I'd be willing to break him off a donation) and get it back up and running...

Here's what I want to know and maybe Zeropage can answer. Can I still run the Ibproarcade without the vbux/vplaza?

[kall]

Originally Posted by Tommy12345

VBulliten.org needs to sent out an email to ALL members of this problem to prevent people from losing years of data accumulated due to no emergency data backup. :up:

This was done immediately upon learning of the issue.

All users who had clicked Install received the following email:

Official Security Exploit Warning:

The staff has been notified of a potential XSS vulnerability in the vbBux / vbPlaza modification. We have confirmed the exploit along with additional exploits in varying degrees. This notification is to serve as an official warning - it is HIGHLY recommended that you disable/uninstall the modification until a fix is provided.

To review protocol for modifications with confirmed exploits found please visit:

https://vborg.vbsupport.ru/info.php?do=security

Best Regards,
vBulletin.org Staff

.. highlighting the importance of clicking Install, if you want to receive IMPORTANT updates.

[Tommy12345]

Originally Posted by kall

This was done immediately upon learning of the issue.

All users who had clicked Install received the following email:



.. highlighting the importance of clicking Install, if you want to receive IMPORTANT updates.

Great job. I am going back to the arcade mod and click installed incase I have not done so.
Looks like this exploit is gaining momentum, I just saw a blank website that I was visiting, that site had the mod installed, I warn the webemaster to disable it but..

[Zachariah]

Originally Posted by AuroraStorm

Can I still run the Ibproarcade without the vbux/vplaza?

Yes.
It's an independent script with a vbux plugin.

[tuwebfacil]

I think one of my sites was hacked, what I have to do?

I disabled the hack by now, but I am still hacked. I prefer to not say the type of hacking to avoid others users from being hacked.