Security Patch for vBulletin 5.7.5 Released

[EL PaperBoy]

<p>This patch solves three issues: how the system detects PHAR files, a potential security issue in BBCode rendering, and a problem with inviting members to a Blog.</p>
<p>Self-hosted customers should apply this patch as soon as possible. Follow these instructions to install this patch:</p>
<ol>
<li>Download the patch from your <a href="https://members.vbulletin.com">Member's Area</a>.</li>
<li>Upload the files to your server, overwriting the ones there.</li>
<li>Run /core/install/upgrade.php.</li>
</ol>
<p>Patches Released:<br />
vBulletin 5.7.5 Patch Level 2</p>
<p>FAQ:</p>
<ul>
<li><p><b>I am using an older version of vBulletin 5; what do I do?</b><br />
&nbsp;&nbsp; Please download the entire vBulletin 5.7.5 PL2 download package and complete a full upgrade.</p>
</li>
<li><p><b>I am using vBulletin 6. Is there a patch?</b><br />
&nbsp;&nbsp; No. vBulletin 6.0.1 contains these fixes. You should upgrade.</p>
</li>
<li><p><b>I am using vBulletin Cloud, do I need to do anything?</b><br />
&nbsp;&nbsp; vBulletin Cloud has also received a patch to address these issues.</p>
</li>
</ul>

Continue reading...