OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: vBulletin Security Vulnerability

From: Kier Darby (kiervbulletin.com)
Date: Wed Jan 21 2004 - 14:35:36 CST


In-Reply-To: <20040120190824.GA4674natalya.rebby.com>

No patch has been issued for this 'vulnerability' because no vulnerability exists.

There is no hidden field called "reg_site", nor any $reg_site variable anywhere in the vBulletin 2 or vBulletin 3 source code or templates, nor has it ever existed.

We can only assume that this vulnerability was found in a site running code modified from that supplied by Jelsoft.