Security Patch - vBulletin 5.2.2, 5.2.3 and 5.2.4 (Updated)

[Wayne Luke]

A security issue has been discovered by the vBulletin team. To fix this issue, we have created a new security patch.

You can download the patch for your version here: http://members.vbulletin.com/patches.php

To install the patch:
1) Download the appropriate files for your version of vBulletin 5
2) Upload all files found within the zip file. Make sure to overwrite the existing files on your server.

If you are using a version of vBulletin 5 Connect prior to 5.2.2, you are encouraged to upgrade as soon as possible to protect your content.

vBulletin Cloud sites have already had this fix applied.

Patches:
5.2.4 Patch Level 1
5.2.3 Patch Level 1
5.2.2 Patch Level 2

[Wayne Luke]

An issue has been found in the Patch that can prevent proper routes from being created. This affects new channel creation and content within these channels. To resolve this issue, we've issued a new patch that resolves this issue.

Installation is the same as above.

Patches:
5.2.4 Patch Level 2
5.2.3 Patch Level 2
5.2.2 Patch Level 3

Cloud sites have already been patched.

The symptoms of this issue are a blank page when entering a channel or topic in a new channel. The resolution is to follow these steps:

1. Create a backup of your database.
2. Upload the /core/install folder to your server.
3. Upload tools.php from your do_not_upload folder to the /core/admincp folder on your server.
4. Load tools.php in your browser by adding this string to your vbulletin Address: /core/admincp/tools.php
5. Use the option to Repair Routes
6. Delete the /core/admincp/tools.php file and the /core/install folder.

If you have this issue on a Cloud Site, please open a support ticket.