منتدى استراحات زايد

Hello.

Today I have got the following mail from server:

Quote:
vBulletin Database Error!
[email protected] 25 мая 2009 г. 22:00
Кому: [email protected]
Database error in vBulletin 3.8.2:

Invalid SQL:

SELECT postid
FROM postindex
WHERE wordid IN(1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19 ,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,3 6,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52, 53,54,55,56,57,58,

528,368529,368530,368531,368532,368533,368534,3685 35,368536,36!
8537,368
538,368539);

MySQL Error : Got a packet bigger than 'max_allowed_packet' bytes
Error Number : 1153
Request Date : Monday, May 25th 2009 @ 10:00:01 PM
Error Date : Monday, May 25th 2009 @ 10:00:03 PM
Script : http://www.gsmforum.ru/search.php?do=process
Referrer : http://www.gsmforum.ru/forumdisplay....er=desc&page=8
IP Address : 85.26.183.58
Username : matiev ahmed
Classname : vB_Database_MySQLi
MySQL Version :
I am running latest Vbulletin 3.8.2 on my server. How can attacker pass such a query through forum engine for execution? Maximum number of search results on forum is set to 300.