http://www.bbc.co.uk/news/technology-10714192The flaw in a specific version of the vBulletin software allows anyone to easily access the main administrator username and password for a site. This would also allow hackers to access data, such as e-mail addresses, and edit the site at will.
The owner of the program - Internet Brands - released a fix on 21 July.
However, at time of writing, many sites remain vulnerable.