Using vBulletin 3.8 is dangerous

Status
Not open for further replies.

Alex53

New member
This is not an anti-advertisement as it might seem. I simply can't post on the company's forum because a license is required. They don't respond to my emails, so I’m writing here.

I wrote to the vBulletin company administration, informing them that a group of Russian hackers is stealing entire forums and launching them on new domains. They didn’t respond to my emails. Yes, it’s hard to believe, and I can’t prove it because from the outside, it looks like a fully functioning forum with no errors, complete with messages dating back 10 years, and it's unclear who the owner is. Yes, vBulletin could always say that the vulnerability is somewhere else, like in the hosting or other software.

But recently, the situation changed. Russian hackers completely stole the forum of the vBulletin company itself – vbulletin.org – and re-uploaded it to a new address:

What will vBulletin say now?

And this is not scraping, as it might seem; it’s the entire forum, with all the passwords, your email, and your private messages, where users may have shared passwords to their servers or information related to money.

I just want to issue a warning – immediately update vBulletin version 3.8.
I don’t know to which version exactly – whether to 4, 5, or 6.
 
But how it's related to 3.8?
Probably because only 3.8 can be hacked that way at the moment.

However, everybody still running 3.8 at the moment is a bit stupid anyway, because exploits were known and 3.8 is already EOL and unsupported for 11 years now if I'm not mistaken.
I was already surpised that the .org recently closed since august this year, still running 3.8.14. :)
 
Status
Not open for further replies.
Back
Top Bottom