Vbulletin Security Notice

[Rhett]

p.s. I only recommend vbulletin versions up to 4.1.2 for a stable platform ____________________________________________________________ vBulletin SECURITY BULLETINhttp://www.vbulletin.com/2nd August 2011 * vBulletin 4.1.3/4.1.4 and 4.1.5 Security Patch* vBulletin 4.1.5 released* Your License Information* Contact Us ------- VBULLETIN 4 PATCHES RELEASED -------------------- 4.1.5pl14.1.4pl34.1.3pl3Has been released. This patch strengthens the security of the AdminCP to prevent a reported XSS attack in vBulletin versions 4.1.3, 4.1.4 and 4.1.5. To resolve this issue, it has been necessary to release a patch level version for these three versions only. The issue is limited to certain browsers only, and does not affect versions of vBulletin prior to 4.1.3. The patching process is the same as previous patch level releases - simply download the patch from the Members Area, extract the files and upload to your webserver, overwriting the existing files. There is no upgrade script required. As with all security-based releases, we recommend that all customers upgrade as soon as possible in order to prevent any potential damage resulting from the flaw being exploited. For further details, please check here: http://www.vbulletin.com/go/415p To rectify the issue please download the patch for the version of vBulletion you're currently running from the members area of vBulletin: http://members.vbulletin.com/patches.phpWe recommend you install this security patch as soon as possible. The upgrade process is the same as previous patch level releases - simply download the patch from the Members' Area, extract the files and upload to your webserver, overwriting the existing files. There is no upgrade script required.