A security issue has been reported to the vBulletin team. Potentially, this issue could allow attachment uploads to exploit your system. This issue has been resolved.
You can download the patch for your version here: http://members.vbulletin.com/patches.php
To install the patch:
1) Download the appropriate files for your version of vBulletin 4
2) Upload all files found within the zip file. Make sure to overwrite the existing files on your server.
This should not affect your modified settings.
If you're using version 4.2.1 or before, then you should upgrade to your installation of vBulletin to 4.2.3.
In addition to the patches, a new version of vBulletin 4.2.4 Beta is also available. Please perform a regular upgrade if you are using the beta.
Patches:
4.2.3 Patch Level 2
4.2.2 Patch Level 6
