Opensuse forums defaced running vbulletin 4.2.1, is LQ vbulletin 3.8.8 vulnerable ?

A cracker defaced the opensuse forums which are running vbulletin 4.2.1:
http://linux.slashdot.org/story/14/0...dresses-leaked

It appears that the fix is found only in vbulletin 5.0.5. So my question is, is LQ, running vbulletin 3.8.8 Beta 1 vulnerable ?

We're running the latest version of the branch we're currently on, but as a 0day was used here there is no way to know for sure if LQ is vulnerable. As always, we'll continue to monitor the situation and will remain vigilant with updates.

--jeremy

Also the opensuse forum is under the control of Novel and NOT the opensuse community

so any decision was/is done by corporate and not the forum admins .

I guess this is a question to Jeremy - Any plans of moving over to open source bulletin board solutions, like phpbb? Just curious!

We have no specific plans to switch platforms at this time.

--jeremy