Re: PHP Exploit via phpBB?
| From: | John Nichel | Date: | Wed, 22 Dec 2004 19:54:51 +0000 |
| Subject: | Re: PHP Exploit via phpBB? | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-204988@lists.php.net to get a copy of this message | ||
Ashley M. Kirchner wrote:
John Nichel wrote:I'm fully aware of what was written on phpBB's site, and have been running 2.0.11 (the latest version) for the past two weeks. -- John C. Nichel ÜberGeek KegWorks.com 716.856.9675 john@kegworks.comI haven't fully researched it yet, but our domains were just hacked, and from the looks of it, the attack came in thru phpBB. This morning, around 9:00am, I upgraded our webserver to php v4.3.10 from v4.3.9 due to potential security risks, and at 11:30 it looks as if the attack started. By 11:48, all of the php pages, on all of our domains were replaced by one like this... http://john.nichel.net I don't know if this is a PHP problem or a phpBB problem as of yet, but I wanted to get the word out here so that y'all can take precautions if neccessary. I disabled the system() function on our box, and may need to take further action as I discover more.You're missing the fact that you need to read phpBB's web site from time to time.