Re: PHP Exploit via phpBB?
| From: | John Holmes | Date: | Wed, 22 Dec 2004 19:49:45 +0000 |
| Subject: | Re: PHP Exploit via phpBB? | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-204985@lists.php.net to get a copy of this message | ||
> From: John Nichel <john@kegworks.com>
> I haven't fully researched it yet, but our domains were just hacked, and
> from the looks of it, the attack came in thru phpBB.
Not keeping up with the news, eh? ;)
There was a big discussion about this on slashdot and other news sites. The worm actually uses
Google to search for sites "Powered by phpBB" and then attacks them.
I thought we all knew better than to use phpBB? Why not just install phpNuke and some random
guestbook and shell access script while you're at it?!?! ;)
---John Holmes...
UCCASS - PHP Survey System
http://www.bigredspark.com/survey.html