Serious problem

[gabrielambrogio]

Hi, in my vbulletin 4.0.3 forum an unknown guy managed to rank only to fit into that group administrator, why this vulnerability on vBulletin 4? anyone know answer? Thank you.

[ChopSuey]

Have you removed the user from the Admin usergroup?

Ask all your staff if they have changed his usergroup.

Also check the logs.

[Lynne]

I don't think this is a vulnerability in vB4 or I would have heard of it before now. Check your access_logs and your admincp logs and talk to your host about security issues if needed.

[gabrielambrogio]

Originally Posted by Lynne

non credo che si tratta di una vulnerabilit? in VB4 o avrei sentito parlare prima d'ora. Controlla la tua e la vostra access_logs admincp registri e contatta il tuo host su questioni di sicurezza se necessario.

The server that hosts the forum anyway so a firewall is not a vulnerability in vbulletin cms 4?

[Lynne]

Sorry, I don't understand what you are saying. The hacker got in somehow. If it was through the code, it would show in your access_logs. If your files were altered, then they got in through the server somehow.