Outdated software but has site unknown_html_RFI_shell malware?

vBulletin version outdated: upgrade required: http://zulu.zscaler.com/submission/show/051b4db773934ca7e2e87c90391c18a9-1347218813
Malware had been on for 33 hrs, but apparently has been closed since 2012-09-08 00:33:43
shell md5.js api…sites still vulnerable through outdated website software vBulletin 3.8.2.
Even later vBulletin code is vulnerable to a php hack via iFrame src= in version 3.8.4 and the site scanned has 3.8.2. according tio Sucuri’s,
so desperately needs to be updated…not to endanger visitors…

polonus