There's an exploit in vbShout and also maybe a backdoor in your vBulletin if it's not the official paid version? You get what I mean?