Database Error 3.8.2 - Invalid SQL Select * From datastore WHERE title='pluginlist'

[AlpineZone]

I hadn't touched anything and started gtetting nailed with these errors about 30 minutes ago, and now I'm getting about 500+ every fifteen minutes. Seems like every action is causing one. Site is loading and performing fine, or appears to be. Any ideas on what this represents?

Databaseerror in vBulletin 3.8.2:

Invalid SQL:
SELECT * FROM datastore WHERE title='pluginlist';

MySQL Error   :
Error Number  :

Request Date  : Tuesday, January 24th 2012 @ 08:54:43 PM
Error Date    : Tuesday, January 24th 2012 @ 08:54:44 PM
Script        : [URL]http://forums.alpinezone.com/search.php?searchid=1734380[/URL]
Referrer      :
IP Address    : 95.211.74.89

[bstillman]

Database Error 3.8.2 - Invalid SQL Select * From datastore WHERE title='pluginlist'

Ok odd. Someone else just posted the same thing happening to their site. Unfortunately I'm on the mobile app and can't figure out how to copy the URL. It was posted by user nicklfire.

[AlpineZone]

i hope i didn't gtet hit with some security vulnerability of some sort...

[Ken Iovino]

Our boards were hit with the exact same error just a couple of mins ago. It seems to come and go randomly for whatever reason.

Database error in vBulletin 3.8.4:

Invalid SQL:
SELECT * FROM datastore WHERE title='pluginlist';

MySQL Error   : 
Error Number  : 
Request Date  : Tuesday, January 24th 2012 @ 06:02:02 PM
Error Date    : Tuesday, January 24th 2012 @ 06:02:02 PM
Script        : http://www.v7n.com/forums/showthread.php?t=295557&goto=newpost
Referrer      : http://www.v7n.com/forums/
IP Address    : ...
Username      : Admin
Classname     : vB_Database
MySQL Version :

Any ideas as to what is causing this? I've shut down the boards for now, but i can't do that for long as out site is very active. I also haven't seen anything weird in any of the plugins code that could cause this. I went through them all one by one.

[Ken Iovino]

There's more information about this here:
https://www.vbulletin.com/forum/show...uginlist%27%3B

Looks like it's vBSEO related
http://www.vbseo.com/f5/vbseo-securi...83/#post325546

[bstillman]

Our boards were hit with the exact same error just a couple of mins ago. It seems to come and go randomly for whatever reason.

Database error in vBulletin 3.8.4:

Invalid SQL:
SELECT * FROM datastore WHERE title='pluginlist';

MySQL Error   : 
Error Number  : 
Request Date  : Tuesday, January 24th 2012 @ 06:02:02 PM
Error Date    : Tuesday, January 24th 2012 @ 06:02:02 PM
Script        : http://www.v7n.com/forums/showthread.php?t=295557&goto=newpost
Referrer      : http://www.v7n.com/forums/
IP Address    : ...
Username      : Admin
Classname     : vB_Database
MySQL Version :

Any ideas as to what is causing this? I've shut down the boards for now, but i can't do that for long as out site is very active. I also haven't seen anything weird in any of the plugins code that could cause this. I went through them all one by one.

https://www.vbulletin.com/forum/show...changed-to-red

[downeastboat]

I hadn't touched anything and started gtetting nailed with these errors about 30 minutes ago, and now I'm getting about 500+ every fifteen minutes. Seems like every action is causing one. Site is loading and performing fine, or appears to be. Any ideas on what this represents?

Databaseerror in vBulletin 3.8.2:

Invalid SQL:
SELECT * FROM datastore WHERE title='pluginlist';

MySQL Error   :
Error Number  :

Request Date  : Tuesday, January 24th 2012 @ 08:54:43 PM
Error Date    : Tuesday, January 24th 2012 @ 08:54:44 PM
Script        : [URL]http://forums.alpinezone.com/search.php?searchid=1734380[/URL]
Referrer      :
IP Address    : 95.211.74.89

Hi guys... same thing happened to me tonight.. scared the bejesus out of me.. I think I got close to 2000 emails with the same error.. I have my designer looking into it and I did a search myself and was somewhat releived that other people are having the same issue.. I am running 3.8.7 patch 2.. with vbseo... all my links went red and people are complaining of error messages when they post but their posts wind up going through....Many thanks in advance to someone who can help me sleep tonight

[bstillman]

Hi guys... same thing happened to me tonight.. scared the bejesus out of me.. I think I got close to 2000 emails with the same error.. I have my designer looking into it and I did a search myself and was somewhat releived that other people are having the same issue.. I am running 3.8.7 patch 2.. with vbseo... all my links went red and people are complaining of error messages when they post but their posts wind up going through....Many thanks in advance to someone who can help me sleep tonight

Read the other thread. https://www.vbulletin.com/forum/show...changed-to-red

[modelisme.com]

final step to fix it

Read the other thread. https://www.vbulletin.com/forum/show...changed-to-red

Hi,

I add the same issue this morning, I patch the vbseo,

and I go to the plugin list,

I desactivate the only one which was not in red .... :-)

And it is now fixed,

Hope that help
Rgds

[Chase]

I am having this same issue on my forum. Unfortunately I won't be able to fix this until I get home from work later today around 3 et. Is my forum under a huge risk of damage etc or am I just going to get a million emails for the time being until I fix it.

[kpmedia]

Additionally, I've written up fairly detailed analysis here:
vBSEO Hack/Exploit! Adds unknown plugins, turns links red, causes database errors

I think the vBSEO site is potentially overlooking some of the implications of what his hack may have done. I saw significant drops in Amazon affiliate sales after a certain forum was hacked. Cookie skimming may have been going on.

Additionally, I think we need to lobby vBSEO on making the "update phone home" feature optional -- not forced. Let us turn it off, if unwanted. That's why we all got hacked. An updates mailing list would be far more acceptable than coding something into a site, which others can use as an exploit entrance point. (If they fail to do so, I may see if I can turn off the update checker by patching vBSEO on my own.)

And then you'll want to refer to the vBSEO.com thread, specifically page #1 and #12.
- http://www.vbseo.com/f5/vbseo-securi...release-52783/
- http://www.vbseo.com/f5/vbseo-securi...3/index12.html