vBulletin Announcements

Further to the issue that was rectified with vB 4.0.8 PL1, an additional concern was identified that may affect users utilizing IE6. The flaw may enable users to upload a script to their own profile, and viewers of that profile when utilizing IE6 may be exploited. This issue only affects vBulletin 4.0.8/vBulletin 4.0.8 PL1 where User Profile Customization has been enabled by the administrator. No other versions of vBulletin are affected. Versions of vBulletin 4.0.8/4.0.8 PL1 that do not have User Profile Customization enabled, or elect to disable the User Profile Customization are also not affected. To rectify the issue please either download the patch from the members area of vBulletin: Please Log In Or disable user profile...

An XSS flaw within the user profile customization was recently reported to us. On initial investigation it appeared that the flaw would only affect the user who attempted to perform the exploit when visiting their own profile page. Additional reports we have since received, confirm that certain visitors utilizing Internet Explorer 6 and specific variants of Internet Explorer 7 may be exposed to this exploit. The exposure to other users that utilize IE6 and certain variants of IE7 has been rectified with this patch. This issue only affects vBulletin 4.0.8 where User Profile Customization has been enabled by the administrator. No other versions of vBulletin are affected. Versions of vBulletin 4.0.8 that do not have User Profile...

vBulletinÂ’s native iPhone app is now available to download from the iTunes store to use with vBulletin.com The app will enable you to interact with vBulletin.com/forum from your Apple device via this native application. Download the app View a short video of the app Report bugs on the app (coming soon) Provide feedback on the app (licensed customers only) Get more info! Thanks, Adrian More...

Everyone, vBulletin 3.8.7 Beta1 which fixes these bugs vBulletin Blog 2.0.3 Beta1 which fixes these bugs This version will enable vBulletin Blog to work with newer version of PHP. Both are available for download via http://members.vbulletin.com Please note: These releases are Beta releases, and subsequently have not progressed through our QA cycle, while we are aware of no regressions or other concerns that specifically affect these releases we encourage, and recommend you utilize diligence before installing any Beta release on a public website. If you purchased our 3 month license extension and the time period on your license has now expired and you are subsequently unable to download these versions, please contact us...

I would like to announce that version 4.0.8 of vBulletin Publishing Suite and vBulletin Forum is now available. If you have an active vBulletin license, you can download your copy of 4.0.8 from the vBulletin Members Area at: http://members.vbulletin.com 4.0.8 fixes over 390 bugs since the release of 4.0.7. Highlights of bug fixes included in 4.0.8 Profile Customization bugs. Template Bugs CMS bugs Widget bugs Google Sitemap Bug Full list of bug fixes. Added features: Member Profile Customization (Instructions can be found here) Some major CSS improvements and "Stylevar" changes. - list of deprecated Stylevar's can be found here (these changes should not affect custom styles) Thankyou We'd like to thank the following...

Further edit: I would like to announce that vBulletin 4.0.7 Maintenance Release of vBulletin Publishing Suite and vBulletin Forum is available. If you have an active vBulletin license, you can download your copy of 4.0.7 from the vBulletin Members Area at: http://members.vbulletin.com 4.0.7 fixes around 50 bugs since the release of 4.0.6. Bug fixes Updated templates Requires revert (Changes to these templates are mandatory for security purposes or for correct functionality. If you have customized these templates, you should either revert them or merge the new changes into your custom template.) MEMBERINFO facebook_importregister facebook_associate facebook_disassociate modifyconnections postbit_ignore register...

Thanks to user "Sir Nick" for reporting the following issue: [#VBIV-8431] Reporting Posts = Database Error - vBulletin JIRA The issue only impacts users with "Forum only" and does not impact any customer who utilizes our Suite product. [SIZE=4]Downloading the fix: If you are already running 4.0.6 Forum only, we have released a patch for the issue, which is available in our members area: Please Log In If you are yet to download 4.0.6 Forum only, we have updated the download version in the members area, and the fix is included in the product. Sorry for the inconvenience. I might also add, we typically only release Patch Level releases for security bugs, however given the impact of this issue to our customers, we felt it warranted...