PHP Sploit

[jMerliN]

WARNING

PHP Floating Point Bug Crashes Servers - Slashdot

I'm not sure vBulletin is vulnerable (does it try to interpret any inputs as numbers rather than ints?) or if you're running a relatively recent version of PHP but you may want to patch this, MentaL.

I just tested this in a quick script on my desktop and indeed:

xxx 

Causes it to enter an infinte loop. I'm guessing the arcade is an area where vBulletin may be vulnerable as it may interpret floating point numbers somewhere.

[MentaL]

[Samus.]

Should haved PM'd MentaL.

[MentaL]

Cheers for the info.

[jMerliN]

Should haved PM'd MentaL.

If I could've :P