vBulletin 4.0.2 Patch level 1 Exploit!

[loverzpoint]

Submitted Bug report! ( :

[loverzpoint]

Removed!

[loverzpoint]

XSS bug found

Infected Version: 4.0.1 , 4.0.2 , 4.0.2 PL1



i have checked Live demo ! Bug exist and also in VB 4.0.2 PL1 please fix it!

[loverzpoint]

buddy you solved my problem, while professionals failed. Thanks alot dude. really appreciated.

[loverzpoint]

please advise how to fix this issue ?...

[loverzpoint]

Lynne, all plugins has been disabled from the beginning by editing config file same as you said, i deleted and re uploaded all files 3 times and nothing worked for me, ahhhh

[loverzpoint]

i did everything, style changer is now working fine.

but still quick reply is messed up, is there anything else that i can do ?

[loverzpoint]

i did created a new style with no parent, but still facing the same problem plus one more thing, i am not able to change styles from "Style Changer" when i choose different style nothing changes....

[loverzpoint]

after upgrading to 4.0.2 quick reply is completely messed up icons up & down and i cant even click on icons please see attached picture....

[loverzpoint]

i have Fixed it! thanks

[loverzpoint]

Hello,

i get error while i upgrade to new version

Database error in vBulletin 3.8.4:

Invalid SQL:
INSERT INTO attachment
(contenttypeid, contentid,...

[loverzpoint]

well, nothing can be made perfectly errors and bugs cant be fixed totally and will remain. compatibility and update issues can be fixed in a planned time frame so vBulletin should provide a time frame....

[loverzpoint]

Fixed it from this thread! http://www.vbulletin.com/forum/showthread.php?t=279702 Thanks!

[loverzpoint]

hello,
when i am opening my site in firefox i got this error !

Content Encoding Error



The page you are trying to view cannot be shown because it uses an invalid...

[loverzpoint]

well i don't know who is attacking And its impossible to block ip's i can't block each ip alots BOT..!!

[loverzpoint]

Hello,

well my vbulletin is Under attack i have Contact With my Dedicated hosting provider and i tried DDOS protecting sheild's ETC! everything my dedicated server provider says they can't...

[loverzpoint]

Well i upload new vb files and then /install/upgrade_384.php < i open this in browser and next next next thats it!.......

[loverzpoint]

Hello,

i have Upgraded to 3.7.2 to 3.8.4 i am getting users problem one click on any username get database error i was trying to update counters

when i "Update User...

[loverzpoint]

I have changed over 6 servers in last week! shall i upgrade my vB version ?...

[loverzpoint]

Hello,

i got Flood attack on my site.. with bots. like 1500 bots just keep opening 1 thread and forum goes down.. i have paid $600 For DDOS Proxy Shield Protection .. and its Protect with...