vBulletin Vunerability

[knightrous]

If there has been a zero day vulnerability discovered in vBulletin forum software, if the forum is affected by this, it could explain why the MyStore and porn comes back every time someone clears it.

http://arstechnica.com/security/2015...0-day-attacks/

Another 'researcher' has made a comment and outlines how the flaw works.

http://pastie.org/pastes/10527766/te...j4afb9ipqzllsq

The fix was just replacing the unserialize() with json_decode(). Btw this bug has been sitting in vBulletin for more than three years.
-- cutz

Hope this helps out

[trdee]

update. this looks to be firmly put to bed now. havent seen any redirects for a few months