This vBulletin vBug is vBad: Zero-day exploit lets miscreants hijack vulnerable web forums

Hackers can inject system commands via version 5 of software, no patch available

An anonymous bug hunter has publicly disclosed a zero-day flaw in the version 5 of the popular vBulletin forum software than can be exploited over the internet to hijack servers. No patch is known to be available."