VBulletin 3.8.4 has been exploited

Status
Not open for further replies.

Hx

Active Member
1,866
2009
130
0
Hey as you guys know wsm.co.in got hacked today i though it was because it was the old members who did it but i was wrong. It was a guy named king kong i had a chat with him and realised that he has found a exploit on 3.8.4 and is hacking any sites with that version if he gets paid for it watch out and upgrade to 3.8.5

Source:As
 
41 comments
wsm had 3.8.4 mate please upgrade and dont think i made up this story as i dont want anyone to get hacked
 
@1only
check the post of date bro 17 Aug 2009
if there would have been any Exploit too many forums have been fucked untill now
plus wsm was on

vBulletin 3.8.5 just view there source

read the 6th post

http://www.vbulletin.org/forum/showthread.php?t=221074

see this
Code:
http://209.85.229.132/search?q=cache:dxOAps9JlnIJ:www.hackforums.net/showthread.php%3Ftid%3D124858+http://www.hackforums.net/showthread.php%3Ftid%3D124858&hl=en&client=firefox-a&strip=1
 
Hey as you guys know wsm.co.in got hacked today i though it was because it was the old members who did it but i was wrong. It was a guy named king kong i had a chat with him and realised that he has found a exploit on 3.8.4 and is hacking any sites with that version if he gets paid for it watch out and upgrade to 3.8.5

Source:As

You sir, are an idiot.

You realised there's exploit or it's because King Kong told you there is? Second, WSM is using vBulletin 4.0 not 3.8.4.
 
It most probably is not a exploit within VBulletin its self, more likely in a plugin that has been installed.
Check the logs if you know howto to see if there is anything..
Also maybe the person(S) have been keylogged?
 
ye but how do we know that king kong hasnt exploited the vb and the way he told me he seemed pretty sure

and thx for posting storming now we know they are on 3.8x and im sure they were on 3.8.4 when they got hacked
 
Yeah all "hackers" would say that they hacked Vb if they got access to the site - I bet you any money he cannot hack some of the major sites thats running it, because if you notice he has only targeted useless non-needed sites.
And I'm 99% sure he had there passwords via keylogging them etc
 
Status
Not open for further replies.
Back
Top