IMPORTANT: Security issue about PHPBB

[SteveLightspeed]

If anyone is running the Phpbb message board system on their sites, check this out

http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=244451

We just found out about this, unfortunately we learned the hard way after hackers used this exploit to seriously fuck us.

This exploit is well known by hackers, and porn sites ARE BEING TARGETED!


Steve Lightspeed

[KRL]

I think that alert was posted Steve about 2 weeks ago. Or is this a new one??

[bllott]

Originally posted by Lightspeed
If anyone is running the Phpbb message board system on their sites, check this out

http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=244451

We just found out about this, unfortunately we learned the hard way after hackers used this exploit to seriously fuck us.

This exploit is well known by hackers, and porn sites ARE BEING TARGETED!


Steve Lightspeed

thanks man!

[SteveLightspeed]

Originally posted by KRL
I think that alert was posted Steve about 2 weeks ago. Or is this a new one??

Well, if it was, my whole staff missed it, and we read GFY every day.

Couldn't hurt to mention it again, right? I wish someone would have reposted it for us to find out about this before this week.

Steve Lightspeed

[Johny Traffic]

Well, if it was, my whole staff missed it, and we read GFY every day.

Get them to start reading it with there eyes open

Its been posted many many times http://www.gofuckyourself.com/showth...hreadid=400875

But worth bringing up again Its a real fucker

[Cory W]

We replaced that code asap. Our board is not connected to our Weg servers, but my concern was the user/pass information in the phpbb sql database.

Out of curiousity Steve, what did they attempt to do?

On a side note, I would import all of that information into V-Bulletin. I have been saying this for the past year. It takes about 2 hours for a good programmer to use the innate import script. It is just safer.

[SteveLightspeed]

Thanks Johnny Traffic,

It may just be that this board moves too fast sometimes, or we got distracted with something else.

Wish I would have seen your warning myself.


Steve Lightspeed

[Cory W]

Originally posted by Johny Traffic
Get them to start reading it with there eyes open

Its been posted many many times http://www.gofuckyourself.com/showth...hreadid=400875

But worth bringing up again Its a real fucker

Yep, thanks for your post.

[SteveLightspeed]

Originally posted by WEG Cory
Out of curiousity Steve, what did they attempt to do?

They deleted our entire Lightspeed4 database. We are still working with Natnet to recover everything. Thank God for Natnet, or we would be in serious deep shit.

Steve Lightspeed

[Fake Nick]

hahahaha how could you have missed the thread about Saudi Arabia NOT being in ASIA ? ? ?

that thread was started about a board being hacked by some Saudi dudes who used this exploit


someone called them asian hackers but the oracle porn dissagreed and try to convince the world (read gfy) that Saudi Arabia is NOT in asia


how could all of your employees have missed a 5 page thread that went on for couple of days !! !


they are taking advantage of you Steve ! someone should get fired over this

[dirtysouth]

Originally posted by Fake Nick
hahahaha how could you have missed the thread about Saudi Arabia NOT being in ASIA ? ? ?

that thread was started about a board being hacked by some Saudi dudes who used this exploit


someone called them asian hackers but the oracle porn dissagreed and try to convince the world (read gfy) that Saudi Arabia is NOT in asia


how could all of your employees have missed a 5 page thread that went on for couple of days !! !


they are taking advantage of you Steve ! someone should get fired over this

One of the funniest threads of the year for sure!