Today, we have had several support tickets in regards to defaced vBulletin forums. Upon investigation of the weblogs, we've determined that a vulnerability exists in FlashChat v4.5.7 (at least) that is being exploited. It appears that a securityfocus exploit was published for this on June 16.
Any customers that have FlashChat installed on their servers should verify that their copy is secure by contacting the vendor.
Link To Original Article
FlashChat and TopXStats Plugin Vulnerabilities
