Attention car clubs (and other forums) your server may be at risk. I’m looking at you {subaru forum in particular}, AI isn’t going to help me with banjo bolts like that 67-page thread can.
The vulnerability could be exploited by e.g. administrator users, by editing a template/style in the admin panel and adding a specially crafted {vb:math} tag (which is a sort of wrapper around the vB5_Template_Runtime::runMaths() method).
However, this can also be exploited by unauthenticated attackers by abusing the ajax/render/[template] route, rendering a template which uses the {vb:math} tag with an user-tainted parameter. One of the possible templates that can be abused that way is the default “pagenav” template:
I did go check my old haunts of NASIOC, VWVortex, Tacoma World, RX7 Club.
The world is probably better leaving SA/FYAD, CFUS, and the like in Internets lore. doG help us if the LLMs trained on it.
I thought about it later and there are a ton of firearm related forums that are likely very active. A data leak from those sites is probably rather sensitive.
I used to own a racing forum for the Spokane/NorID area. I never looked, but I was told my site was commonly used for hook ups.
Spokane?!? I bought an FC RX7 from a guy in Spokane like 15 years ago. Buddy of mine bought an R32 in Puyallup once and tried to sneak it across the border (R32’s aren’t legal in Canada), got caught and tried to play dumb.
He didn’t get in too much trouble for it but he did have to leave it at a storage lot in Lynden until he could sell it again
