help, site hacked, 2nd vb site in a week, same hacker

[shortbus1662]

http://www.ultimatenurse.com/forum/

It's the same damn people that hacked my
http://www.huntandfishfinders.com/forum

the hunt/fish site is on 3.6.4
the nursing site is on 3.6.8

Is there a mod/hack that has had a vulnerability in it discovered recently that I don't know about?

--------------- Added 1199341772 at 1199341772 ---------------

anyone?

I know it hasn't been very long at all but I really need to get this figured out before another one of my sites gets hacked.

[Lynne]

It might help if you are more specific about exactly what the hacker did - like did he delete the database, change the templates, delete the files, exactly what is done to the site (yes, I can see the page, but what happened to vbulletin).

Also, you may want to compare hacks on the two sites and see which are common between the two.

[Michael Biddle]

What mods do you have on both?

[shortbus1662]

I'm trying to figure out which hacks they have in common.

If you saw that nursing site, he somehow got the forum to completely disappear. On the hunting site, it was like he was just able to hack the header somehow, but it appeared to only the stylesheet.

[sturdy]

The VB is secure I think, otherwise we should have lots of more hacking-complaints, it must be some of your hacks....

However .. its a nice defacement.

[shortbus1662]

they've hacked my hunting site again. Sigh!

VBSEO 3.0 RC5 could be it.

I don't know that there are any hacks on there now other than vbadvanced.

I'm not using that on my nursing site anymore though.

if you look, they aren't hacking the home page, just the forum, even though it's powered by vbadvanced.

[SEOvB]

Are you sure they don't have access at another level to do it?

[Animecraving]

.....check your chmod btw... chmod can kill your site you know..
and btw... how did they hacked? like deleted your content? or something?

[Lynne]

Have you checked your logs to see if they are logging in via ssh? Or via the admin panel? I think you really need to figure out how they are getting onto your sites before you can fix this.

[shortbus1662]

it was according to my host a security flaw in vbgallery.

I guess this confirms it:

http://www.photopost.com/forum/showthread.php?t=134910