» Site Navigation |
|
|
|
» Online Users: 371 |
| 17 members | 354 guests |
analEscata, chimchans, chinasoso, ComeCrolope, efgh068, elatianna, ghij840, Krono, mukhtarbd, Poonyzece, qlink12, ScottH, Sempewrgo, Shawn, TGG SE7EN, trastuso, usagirl19735
|
|
» Donations |
|
If You Like This Website, And Would Like To Give Something In Return, You Can Make A Donation. Your Donation Will Be Used To Pay For Hosting Service, Domain, And Maintenance Costs Only!
|
|
» July 2008 |
| S |
M |
T |
W |
T |
F |
S |
| 29 | 30 |
1
|
2
|
3
|
4
|
5
|
|
6
|
7
|
8
|
9
|
10
|
11
|
12
|
|
13
|
14
|
15
|
16
|
17
|
18
|
19
|
|
20
|
21
|
22
|
23
|
24
|
25
|
26
|
|
27
|
28
|
29
|
30
|
31
| 1 | 2 |
|
» Roster |
|
|
|
|
» vBulletin 3.7.2 PL1 and 3.6.10 PL3 Released |
|
Jul 07, 2008 - 4:30 PM - by Shawn
|
vBulletin 3.7.2 PL1 / vBulletin 3.6.10 PL3
An XSS flaw affecting the vBulletin control panel logging system has been identified, another was found affecting boards running in debug mode. It could allow an attacker to trick an admin into unwittingly performing an action within the control panel that they had not intended. To resolve this issue, it is necessary to release patch level versions of vBulletin 3.7.2 and 3.6.10.
One of the XSS flaws was discovered by Jessica Hope and the other by ourselves.
The upgrade process is the same as previous patch level releases - simply download the patch from the Members Area, extract the files and upload to your webserver, overwriting the existing files. There is no upgrade script required.
As with all security-based releases, we recommend that all customers upgrade as soon as possible in order to prevent any potential damage resulting from the flaw being exploited.
Upgrading from 3.7.2, 3.6.10 or their patch level versions
If you are already running 3.7.2, 3.6.10 or their patch level versions, the process you will be required to follow to make your board immune to the XSS problem is very simple.
There is no need to run an upgrade script if you are already running 3.7.2, 3.6.10 or their... [Read More]
|
0 Replies | 39 Views
|
|
» About vBCoderz |
Welcome to vBCoderz. This is an un-official vBulletin web site built to help vBulletin forum owners get the most from their forum.
Building and running a successful forum can be a daunting task, but its much easier to succeed if you can benefit from the experiences of other forum owners. All of the content on this web site comes from people who have been successful forum owners, administrators and moderators. Their experience and expertise is here to help you.
Read on through the forum. We have packed it full of alot of useful information for vBulletin and other needs
If you need anything done on your vBulletin Forum, don't hesitate to
Contact Us!
|
|
Arcade
Articles
vBCoderz
