[Code Monkey]

vBulletin 2.3.10



Following the internal discovery of a potential cross-site scripting flaw, we have decided to put out a preventative security release in order to close the hole before it is exploited.

For the vBulletin 2.3.x branch, the problem can be resolved in one of two ways:

1. Full Upgrade: The best way to fix the problem is to perform a full upgrade, downloading the complete 2.3.10 package from the vBulletin Members' Area and following the regular upgrade procedure.
2. Patch: A second option is to download the patch file in the Members' Area and upload them to your web server, overwriting the admin/functions.php file.

Please do note that vBulletin 2.3.x and 3.0.x are reaching the end of their lives and no longer actively developed, except for security fixes and critical bug resolution. If you have not yet upgraded to a more recent version of vBulletin, you should consider doing so.



Upgrade Instructions:



Instructions for upgrading to vBulletin 2.3.9 are available here.

Link To Original Article