View Single Post
  #2  
Old 12 May 2020, 00:45
TheLastSuperman's Avatar
TheLastSuperman TheLastSuperman is offline
 
Join Date: Sep 2008
Real name: Michael Miller Jr
Check the plugins for any newly added ones, there could be code present in one of the plugins allowing some form of shell script access, or loading a file that allows such access.

You can use Securi to check the site, it does check forums a little better than other scanners:
https://sitecheck.sucuri.net/results...ars.com/forum/

Be sure to also run suspect file versions from the back-end under:
> Maintenance > Diagnostics > Suspect File Versions

You can go further and read the following guides as well to run other checks:
https://forum.vbulletin.com/blogs/mi...vbulletin-site
https://forum.vbulletin.com/blogs/za...ve-been-hacked
__________________
Daddy Does Dios and Figs!

Search - Use the search feature to find similar issues/answers.
Information - Include screenshots, copy/pasted error codes, url etc.
Fixed - Please return to your thread/post and let us know how it was fixed!
Thanks - For participating! Click the "Like" on a post if someone helped you!
Reply With Quote