check for users axhacknow and w3bdrill3r now

[pablo]

Just checking a vBulletin installation and I found that these two username had made it on to my admin list. They also have been made admins on some other forums I've checked, so I urge you to check this. I don't know if this was the result of a know hack, these users were reg'd 19 of December 2013 & 14 of September 2013.


I am running 4.2.2

They don't seem to be registered through the usual way, as there isn't any IP address associated with the usernames and I never got an email alert for them.

[Pogo]

Sounds exactly like the install system exploit.

[Wayne Luke]

http://www.vbulletin.com/forum/forum...ring-your-site