Late reply, i know, but just needed to say this. (incase somebody is afraid of using vb)
vBulletin isnt exploitable. Its the mods that you install.. vBulletin.org is using 3.6.12PL2. Did it ever got hacked? Nope. Did a good site ever got hacked? No!
Did you see the changes in the vb3.8.5? I bet you didn't, because they where all shitty little fixes, like some typos. So i suggest, next time, before trying to play the hero or boost your ego..., read about it, google it!
sorry for the bump.