vb is hacked due to server or vB version ?!

[محروم.كوم]

hello,
I'm havin VPS

2 of my clients got hacked by change the templates. As i noticed that,he used to change spacer_open to run a code.
so all pages it seem it hacked, or just change template " forumhome" .

I know how to fix it up, but how to prevent it to happen again ?

and pls note, that all forums is up-to-date.

I have contacted admin host and this is the reply :?

Quote:
===
Mr. FahaD, the server side it's quite secured at the moment, your sites are getting hacked because of the code, you should have your programmer check them as I said on previous post, No matter how much security software we install, you will keep getting code injections if you don't update your scripts and fix vulnerabilities on them

===
so,if it's server issue what i should disable functions to prevent hackers to hack again ? or software to install it ? ....etc

if it's vb issues, how to fix this exploit ?

and how the hacker can access db ?



========

in Addition, there is no uploaded shell at all, and i'v chked in the logs as well.

I have posted before, and no-one help
http://www.vbulletin.com/forum/showthread.php?t=295547




waiting from Eva __DEFINE_LIKE_SHARE__