vBulletin 3.8.4 Patch Level 1

[mr.behrooz]

سلام

دوستان پچ برای شرکت معتبری نیست بهتر استفاده نشه.

NOTE This contains ONLY 3 FILES. Its not the full software.
---------------------------------------
removed the callbacks..Enjoy your patch.
----------------------------------------
vBulletin 3.8.4 PL1 / 3.7.6 PL1 / 3.6.12 PL2

An XSS flaw within the user profile page has recently been discovered. This could allow an attacker to carry out an action as a user or obtain access to a user's account. To resolve this issue, it has been necessary to release a patch level version of the active versions of vBulletin.

The upgrade process is the same as previous patch level releases - simply download the patch from the Members Area, extract the files and upload to your webserver, overwriting the existing files. There is no upgrade script required.

As with all security-based releases, we recommend that all customers upgrade as soon as possible in order to prevent any potential damage resulting from the flaw being exploited.


Upgrading from 3.8.4, 3.7.6 or 3.6.12

If you are already running the latest version of the 3.6, 3.7 or 3.8 branch, the process you will be required to follow to make your board immune to this flaw is very simple.

There is no need to run an upgrade script if you are already running the latest version.