PDA

View Full Version : vbulletin still going strong still full of yahoo exploits even five versions later SOMEBODY HACK RUBYNET WITH THIS INFO



always stevey
01-23-2014, 06:41 AM
It has come to our attention that there is a security issue in the uploader.swf file included as part of the Yahoo User Interface (YUI) library included in vBulletin 4. As the version of YUI included in vBulletin is end-of-lifed, Yahoo will not be fixing this issue. Their recommendation is to remove the file from your server. We recommend that you replace this with an empty file of the same name (attached). What this will do is force vBulletin to use a fallback javascript based uploader which is already provided in your system.

See: http://yuilibrary.com/support/20131111-vulnerability/

The vulnerable file is also present in the vBulletin 5 download package though not used by the vBulletin 5 front-end. We recommend that you delete the file and replace it with the attached file.

We have also updated all download packages for vBulletin 4.X and 5.X with the new empty file.

To resolve this issue take the following steps:
Delete uploader.swf located in clientscript/yui/uploader/assets or /core/clientscript/yui/uploader/assets
Replace it with the attached file.
Alternatively, you can download the vBulletin package for your version and replace it from that download.

Note: We will not be fixing the vulnerability in the SWF file directly nor do we plan to take any other action on this issue at this time.

always stevey
01-23-2014, 06:42 AM
vbulletin ^___^

always stevey
01-23-2014, 06:42 AM
alienware, loves terrible shit, had to make sure new shit to replace the old shit was just as shit and cost just as much


ytmnsfw, above words, above words

always stevey
01-23-2014, 06:43 AM
awesome mid range computer, now top of the line computer amazing prices

fjs, fucked up at first with vbulletin, able to realize mistake, now using much better free alternative

always stevey
01-23-2014, 06:44 AM
let all the lizards post freely even if it means all ytmnd members leave


no lizards allowed

always stevey
01-23-2014, 06:46 AM
literally chemically unable to give a fuck, does not care about community being happy only cares about a single number which is post count does not matter if the posts are from lizards who make horrible posts

has gone out of his way since 2008 to try to give people the best forum to post on and continues to this day to give a fuck and no lizards at fjs


I can see why ruby's so much more popular than me online

always stevey
01-23-2014, 06:46 AM
if you really think about it if you're still posting at this forum you enjoy abuse just as much as lisa

always stevey
01-23-2014, 06:47 AM
none of you really have the right to talk about her mental problems not the people posting here especially not the people running it

always stevey
01-23-2014, 07:06 AM
It has come to our attention that there is a security issue in the uploader.swf file included as part of the Yahoo User Interface (YUI) library included in vBulletin 4. As the version of YUI included in vBulletin is end-of-lifed, Yahoo will not be fixing this issue. Their recommendation is to remove the file from your server. We recommend that you replace this with an empty file of the same name (attached). What this will do is force vBulletin to use a fallback javascript based uploader which is already provided in your system.

See: http://yuilibrary.com/support/20131111-vulnerability/

The vulnerable file is also present in the vBulletin 5 download package though not used by the vBulletin 5 front-end. We recommend that you delete the file and replace it with the attached file.

We have also updated all download packages for vBulletin 4.X and 5.X with the new empty file.

To resolve this issue take the following steps:
Delete uploader.swf located in clientscript/yui/uploader/assets or /core/clientscript/yui/uploader/assets
Replace it with the attached file.
Alternatively, you can download the vBulletin package for your version and replace it from that download.

Note: We will not be fixing the vulnerability in the SWF file directly nor do we plan to take any other action on this issue at this time.


I know who did this. He does these kinds of things all the time to my computer. Jihad Josh did it. You should fight him