Security Bulletin - vBSEO 3.6.0 PL2 Released

Hello ,

We received a report that identify a security issue on vBSEO package. A new vBSEO version is released to handle this security issue. All packages have been updated within downloads area.

In order to apply patch manually please find follow instructions below

vBSEO 3.5.x and newer versions

In vbseo/includes/functions_vbseo_vb.php file

vBSEO 3.3.x and earlier versions

In includes/functions_vbseo_vb.php file

Please find

PHP:

vbseo_int_var($ids);

Add below

PHP:

vbseo_int_var($aids);

Please note that this security issue has no relevance to Redirect issue many users are facing.

We recommend all users to apply patch as soon as possible.

 

I wonder if this is the same exploit

http://www.exploit-db.com/vbseo-from-xss-to-reverse-php-shell/