Software
vBulletin quietly fixed a site-takeover bug a month ago. the exploit just went public
A researcher found a way to turn a page number into a working PHP shell — no login required. vBulletin patched it in July. A lot of self-hosted forums haven't.
Priya Nair · Jul 31 · 7 min