5 ms·

What's to be learned from this? Server setting needed hardening? Software needed updating and was vulnerable? vBulletin is a well used and documented lice of

• peterwwillis 14y ago
  I'd love to know what the security experts here think. Oh goody! Another million credentials to refine my password dictionary! If it was a known vulnerability there is nothing to learn but "patch your shit". But if you want some advice, the only thing you can learn from somebody exploiting a web application (assuming the hole was in vBulletin, which we have no idea) is that you can't trust the security of web applications. Do all the general system-hardening stuff that nobody ever does, install a webapp firewall, and pray.
• voltagex_ 14y ago
  Seems to me that PHP bulletin boards are always a (easy?) target.
  • dubcanada 14y ago
    "PHP" bulletin boards are the largest there is, VB is the most well known forum software there is... It has nothing to do with PHP, you can exploit any language.
  • iamandrus 14y ago
    Don't use this as a reason to diss PHP. Almost any target, no matter what language, is vulnerable.