Advertise Here | Advertise Here | Advertise Here | Advertise Here
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.
  2. Attention buyers: Please take the time to read THIS
    Dismiss Notice
  3. I have imposed a new requirement today limiting who can start and receive private conversations. This is in an effort to thwart scammers who have a zero post count but private message others offering to sell their licenses. The restriction is not strict, a user must post at least one (1) post in the forum before being allowed to start and/or receive private conversations. Read Forum Post
    Dismiss Notice
  4. Dismiss Notice
Dismiss Notice
Introducing the new Classifieds Section

Please see HERE for more info.

vBulletin Security

Discussion in 'General Chat' started by Bala, Jan 22, 2014.

  1. Bala

    Bala Member

    Local Time:
    5:48 AM
    Is VB worth spending 120$? Especially as VB 4 has quite a few unpatched vulnerability. I would pay about 90$ for the community suite, whole thing blog and forum and pay about 60$ for forum with forumrunner.
     
    Last edited by a moderator: Jan 26, 2014
  2. VICE

    VICE New Member

    Local Time:
    7:18 AM
    What are those?
    All vulnerabilities has been patched so far.
    Please don't spread false rumors.
     
  3. Bala

    Bala Member

    Local Time:
    5:48 AM
    Well if you did not know a few still do exist. I can confirm one XSS as I and my friend were the one to find it and report it on XDA. Ubuntu got hacked, XDA hacked most VB 4.XX forums are facing the heat. Its better to go VB5.
     
  4. VICE

    VICE New Member

    Local Time:
    7:18 AM
    Either you're out of date, speaking nonsenses or have found new exploits.
    In case of the last, feel free to report them as I would like to know as well.
    The XSS exploits has been patched in 4.2.2.
    As for other rumors, none has been definitely proven so far.
     
  5. Bala

    Bala Member

    Local Time:
    5:48 AM
    Well they are new ones mate. I know Vbulletin did fix quite a few vulnerabilities in 4.2.2 but give its record I wont trust it. Nothing against VB but I found these issue when I was considering moving to VB, so currently waiting for someone to post a 5X license. And the trend has been bad for VB most customers especially smaller ones are going to XF.
     
  6. Dan

    Dan Admin Staff Member

    Local Time:
    6:18 PM
    Split this off to a new thread.
     
  7. VICE

    VICE New Member

    Local Time:
    7:18 AM
    Evidences?
     
  8. Andrej

    Andrej Member

    Local Time:
    12:18 AM
    To be honest, vBulletin is no longer worth it. vBulletin 5 is awful. Choice IPS or XenForo, you will not be disappointed.
     
    • Informative Informative x 1
    • List
  9. Mrchris

    Mrchris Well-Known Member

    Local Time:
    6:18 PM
    Vbulletin is as secure as you make it. the main reason most of hacks commonly happen is due to flaws in the plugins and weak passwords. If you routinely take backups and make different passwords per social accounts you should be fine. I would say vb is worth the money if you think about the time, effort, dedication put into that.
     
  10. Stijl

    Stijl New Member

    Local Time:
    7:18 PM
    Totally agree, any software can be compromised if your install is a target. vB legacy products we're written and supported well, vB 5 is still a toddler and will improve with time. There are many communities still running vB 3.X and those community members would not have it any other way. the 4.X series is great for those "publishing" type of communities, I Personally I really like the 3.X version best with the only down side being not terribly mobile friendly without third party add ons and lack of spam control.
     

Share This Page