يرجى الترقية لـ vb3.6.10

[عبدالله ف]

الكرام أعضاء / زوار سوالف سوفت


لا ألاحظ اي اهتمام بالترقية للاصدار vb3.6.10 الحماية تآتي أولاً


vBulletin 3.6.10 Released - vBulletin Community Forum



vBulletin 3.6.10

Although 3.6.9 was intended to be the final maintenance release for the 3.6.x series, the discovery of a CSRF (cross-site request forgery) vulnerability in vBulletin over the weekend has forced the release of an update to plug the hole.

The CSRF problem potentially enabled an administrator who had been lured to a third-party site to unknowingly submit forms located on the forum he or she administers, resulting in potential damage to the forum. Actions performed via the Admin Control Panel are not vulnerable.

The fix for the CSRF issue involves many files and many templates, so unfortunately it is not feasible to produce a patch or a plugin to address the problem. Only a full-scale update will work.

We recommend that customers running versions of vBulletin older than 3.6.10 upgrade as soon as possible.



تلقون اخوانا الهكرز العرب منهم , يفكرون كيف يستغلون الثغرة علشان يستعرضون عضلاتهم

[hanyteto]

شكرا اخى عبدالله على الموضوع

[عبدالله ف]

العفو hanyteto

---

يرجى من الإدارة دمج الموضوع مع هذا الموضوع :

http://www.swalif.net/softs/swalif59/softs226405/

إن سنحت الفرصة