Recent vBulletin vulnerability - is CFC susceptible?

[filli_noctus]

Details of a serious vBulletin vulnerability were recently revealed (details). Has the patch been installed for CFC or is it not running a vulnerable vBulletin version?

 

[Valka D'Ur]

If this only affects boards running 5.1 and above, we have nothing to worry about (of course an admin would have to confirm that, but it's my understanding that we're nowhere near that version of vBulletin).

Besides, has anyone received any notice to change their password?

 

[leif erikson]

Thanks for posting this info. We're looking into it.

 

[Petek]

Also thanks for bringing this matter up. The hacked passwords were for vbulletin.com. In fact, I had to reset my password for that site. CFC uses vBulletin version 3.8.2. Although vBulletin says that only versions in the 5.x series are affected, we'll look into whether we are vulnerable. Thanks again.