Cyb Login to User Account Exploit.

[Mr. C]

Yeah. If anyone hasn't been following vB.org's graveyard, there is an exploit in that mod. It allows a user to access an admin's account. I don't know the specifics, but it's graveyarded on vBulletin.org.

Think we should graveyard, and remove the files here? Or at least put a warning in the first post?

 

[fat-bitch]

How to use it ? Just by typing :

member.php?do=do=cyb_loginasuser&u=1 ??

1 as ID for admin-account ?

 

[bulletin]

Yeah. If anyone hasn't been following vB.org's graveyard, there is an exploit in that mod. It allows a user to access an admin's account. I don't know the specifics, but it's graveyarded on vBulletin.org.

Think we should graveyard, and remove the files here? Or at least put a warning in the first post?

what are you saying? its not in modification graveyard, did you even search there?

its here

3.8.x

Cyb - Login To User Account - vBulletin.org Forum

3.7.x

Cyb - Login To User Account - vBulletin.org Forum

3.6.x

Cyb - Login To User Account - vBulletin.org Forum

 

[yessir]

because it has been fixed and moved back....