vBulletin very easy to hacked ?

[ForceHSS]

Originally Posted by MrXXXnX

Can we have some content-wise discussion about the subject? Because the thing would be interesting if there were some facts, code or something.

My humble guess also would be that you're posting a link to your own twitter profile Pablo to make it more popular since you have 0 posts here, otherwise I don't understand why someone suddenly came here, registered and posted this.

Just like you with 0 posts.

Originally Posted by ForceHSS

Just like you with 0 posts.

Yes. I've posted it intentionally in the incognito mode because I don't argue with hacker kiddos using my real profile, that would be just in case. My forums are secured very well but again ...just in case, because you never can be 100% sure.

[ForceHSS]

Originally Posted by MrXXXnX

Yes. I've posted it intentionally in the incognito mode because I don't argue with hacker kiddos using my real profile, that would be just in case. My forums are secured very well but again ...just in case, because you never can be 100% sure.

Now that made me laugh as it is hard to believe you would just make an account to reply to this one thread

[Okiewan]

Originally Posted by Pablo18

What's going on here...?

In last few days hackers party a lot with vBulletin forum :

***link removed***

I don't care with their reason, but the fact he can hacked few vBulletin forum easily made me think....how weak security in vBulletin. The situation is the fact.

Any opinion...? or providing security patch...?

vBulletin has good protection. Don't worry

Originally Posted by ForceHSS

Now that made me laugh as it is hard to believe you would just make an account to reply to this one thread

I actually did. It took me less than 1 minute. But I was thinking about making one to post in thread like this one since a while and now I just did.

Going back to the subject imho vbulletin especially old vb3 is very secure software. Assuming that one cares about basic system security like weak permissions or control panel and other unnecessary for end user files access then vb is really hard nut to crack. Saying: "vBulletin very easy to hacked " without any fact/proof is just silly babbling. But that's not the reason I did it, the reason I posted above was to induce the OP to post some proofs if he has any... but I really really doubt he has any or that he even knows anything about the web security at all.

Oh and I would like to point that there are some really controversial/unwanted/tempting (for some people) sites powered by vb and many would like to hack them but yet that sites stand still there like solid rocks. So ..yeah.

Sorry if my title too tendentious.

What i mean with fact on above post, during that times, those hackers hacked vBulletin forums....quite easily from the eyes of people like me...and honestly to most other members there.

I'm not have lot experienced with forum software or vBulletin, just a member that feel not happy because the place where he used spend his times and discuss with other members in that community got screwed up.

Perhaps as "amateur" that haven't deep knowledge will see this matter just like that. Am i wrong with that...?

You can delete this thread if you want. Maybe i'm just a member who love and enjoy that forum, so get very angry when see situation like that. Please accept my sincere apologies.

[Max Taxable]

Originally Posted by Pablo18

Sorry if my title too tendentious.

What i mean with fact on above post, during that times, those hackers hacked vBulletin forums....quite easily from the eyes of people like me...and honestly to most other members there.

I'm not have lot experienced with forum software or vBulletin, just a member that feel not happy because the place where he used spend his times and discuss with other members in that community got screwed up.

Perhaps as "amateur" that haven't deep knowledge will see this matter just like that. Am i wrong with that...?

You can delete this thread if you want. Maybe i'm just a member who love and enjoy that forum, so get very angry when see situation like that. Please accept my sincere apologies.

You don't understand that owners/admin can easily corrupt their own board security unknowingly, with skins, add-ons, plugins and Modifications. vBulletin isn't the problem - it's one of the most secure platforms out there until people mess with it.

Like I already said, in much simpler terms.

[Deriggs007]

Originally Posted by Max Taxable

You don't understand that owners/admin can easily corrupt their own board security unknowingly, with skins, add-ons, plugins and Modifications. vBulletin isn't the problem - it's one of the most secure platforms out there until people mess with it.

Like I already said, in much simpler terms.

Actually, most other software out there, such as free CMS's aren't that "hackable" with all kinds of skins, mods installed. vBulletin is very hard to hack out of the box, but you are right that it gets easier outside of the stock environment.

Which is the highlight of vBulletin anyways...... ultimately making it one of the lease secured out of the bunch.

Think about all the spam bots running around --- Only vBulletin (as far as I know) and stock out of the box

[Max Taxable]

Originally Posted by Deriggs007

Actually, most other software out there, such as free CMS's aren't that "hackable" with all kinds of skins, mods installed. vBulletin is very hard to hack out of the box, but you are right that it gets easier outside of the stock environment.

Which is the highlight of vBulletin anyways...... ultimately making it one of the lease secured out of the bunch.

Think about all the spam bots running around --- Only vBulletin (as far as I know) and stock out of the box

Most of them have such a small percentage of installations it's not worth the "hackers'" time to mess with. vBulletin is targeted because it's very popular.

But I am well aware some free open source CMS such as wordpress, Joomla, Mambo, get "hacked" all the time.

Again, native vBulletin isn't the problem, it is very secure. It's when owners/admins corrupt it with add-ons, alternative skins and plugins is where the security holes start.

[killa seven]

hate to burst your bubble but most boards nowadays get hacked because admins give out to many powers and have like 60 different admins, and they also give out their main ftp account which is stupid, but yeagh if you are on an old version like 3.8.* then there are exploits that can be bad. you also got to pay closer attention to the mods you install.