vb.org Archive - My site is Also being hacked

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vB3 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=111)

- - My site is Also being hacked (https://vborg.vbsupport.ru/showthread.php?t=125756)

teedizz

09-04-2006 04:11 AM

My site is Also being hacked

basically, thier doing nothing to tha forum itself, I mean they have no direct access to my server or they would wipe everything...new users are registering & just creating a thread with a title like

">"">>>><meta http-equiv="Refresh" content="0;url=http://myturqey.com/a.htm"> """" >

then for some reason my sites starts to re-direct....after i delete the thread, everything is fine. I do have top x-stats installed so ill try updating that but i was reading the other thread & really seen sooo many suggestions but no definates...so what stops this? I have 3.5.2 installed

Also, is this problem fixed for 3.6?

Wild-Wing

09-04-2006 11:53 AM

go here and read this this takes care of it pememntly http://www.tutorialtomb.com/forum/sh...ad.php?t=13986

KW802

09-05-2006 05:39 PM

What version of vB are you using? On my vB 3.5.x and vB 3.6.0 sites with HTML turned off those threads had no affect.

Guest190829

09-05-2006 06:54 PM

Quote:

Originally Posted by teedizz

It is the TOP x-stats that is doing this. If you did click install, you should have recieved an Official staff update concerning it. I suggest downloading the latest version which fixes the issue...

OnkelM

09-05-2006 09:35 PM

Quote:

Originally Posted by teedizz

I have 3.5.2 installed
Also, is this problem fixed for 3.6?

Before you do the Update to Version 3.6 pls check your Server for your Configs cause you maybe cannot install it due the php- and mysql Version it needs...!

I've update my vb last night 2 Version 3.5.5. and it works all fine! Maybe you should do an update too 4 more safety...

Greets the Onkel

The Finman

09-05-2006 09:42 PM

Quote:

Originally Posted by Danny.VBT

It is the TOP x-stats that is doing this. If you did click install, you should have recieved an Official staff update concerning it. I suggest downloading the latest version which fixes the issue...

Danny, you all might want to mention to people that if they have a "test" board installed to test out upgrades or hacks before installing them on their live board, that if they have Cyb-Avanced Forumhome Stats, Top "X" Stats and ESPECIALLY if they have any version of FlashChat before the new patched 4.6.2 on their test board that they are still vulnerable if these kiddies find their unpatched version of their test forums. I've seen this happen alot with people that have patched their live boards, but forgot to do so on their test boards. :)

Paul M

09-05-2006 09:56 PM

JFYI - it is only possible for a hacker to use the Flashchat exploit if you are running your server with "register_globals" set to "on" (in PHP) - since this is a security issue in itself, anyone who can, should turn that option off in their php.ini

All times are GMT. The time now is 12:30 PM.

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01330 seconds Memory Usage 1,725KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (3)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)post_thanks_navbar_search (1)printthread (7)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: