Forum vBulletin cracked?
 

i have a vBulletin latest Version 4.2.0 pl3, i have install it without any additional or external code, it is a vB "as is" from some month, and yesterday night, i find the community forum down, this one of returned errors on vB email report:
Quote:
Database error in vBulletin 4.2.0:

Invalid SQL:

UPDATE w3_vbsession
SET lastactivity = 1359201784, location = '/forums/', badlocation = 0
WHERE sessionhash = 'b864ac044b06329bb03d419c39722bbe';

MySQL Error : UPDATE command denied to user 'Sql129237'@'62.149.141.204' for table 'w3_vbsession'
Error Number : 1142
Request Date : Saturday, January 26th 2013 @ 01:03:04 PM
Error Date : Saturday, January 26th 2013 @ 01:03:04 PM
Script : http://www.w3it.org/forums/
Referrer :
IP Address : 31.193.132.81
Username : Unregistered
Classname : vB_Database

OR

Quote:
Database error in vBulletin 4.2.0:

Invalid SQL:

INSERT IGNORE INTO w3_vbsession
(sessionhash, userid, host, idhash, lastactivity, location, styleid, languageid, loggedin, inforum, inthread, incalendar, badlocation, useragent, bypass, profileupdate, apiclientid, apiaccesstoken)
VALUES
('d1e8915acefba6171289dbdf56b95878', 0, '193.252.118.175', 'c6d7ec9eabcb8efa1a658e9722b24107', 1359201720, '/forums/misc.php?do=whoposted&t=421', 0, 0, 0, 23, 421, 0, 0, 'Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.8.1) VoilaBot BETA 1.2 ([email protected])', 0, 0, 0, '');

MySQL Error : INSERT command denied to user 'Sql129237'@'62.149.141.204' for table 'w3_vbsession'
Error Number : 1142
Request Date : Saturday, January 26th 2013 @ 01:02:00 PM
Error Date : Saturday, January 26th 2013 @ 01:02:00 PM
Script : http://www.w3it.org/forums/misc.php?do=whoposted&t=421
Referrer :
IP Address : 193.252.118.175
Username : Unregistered
Classname : vB_Database

I will report all as soon as possible, i will be away for four hours more today unfortunately. I have try this night to truncate some table like vbsession on database, but also there is a problem and it return error (the phpmyadmin of the server provider! .... but i do not think it is a problem of misconfiguration of apache server or mysql, i think somebody have hack vBulletin this time ... i think (not sure) at this moment, looking into what i can see right now).

I had try to truncate tables in the vB database as before i had say and the returned error is this (any operation i try to execute on the server phpmyadmin interface):
Quote:
#1142 - DELETE command denied to user 'Sql129...'@'62.149.150.254' for table 'w3_vbsession'

the 62.149.150.254 indicated server for the executed query, isn't the correct server IP.

I will report in four hour more the code i think is bad, contained on some other table like vbexternalcache