If you run a VBulletin forum and do not spend much time in their support forums, a new hack alert was shared in late August. All VBulletin 4.1 and later users need to delete their /INSTALL and /CORE/INSTALL directories immediately.
The hackers who exploit these directories are creating ADMIN accounts.
I also read over there that a FORUMRUNNER exploit may be circulating as well. ForumRunner is a VBulletin addon.
