phpBB.com HACKED!!
 

Bad News for phpBB users:

So far, the phpbb.com remains offline.

*** Removed link and content of this post. We do not need to link to websites ran by hackers or list passwords of another site. ***

sad news indeed

It´s very unfortunate. I hope they get everything sorted.

Well all i can say is that i hope they sort this out asap, Its a nightmare when something like this happens, it feels like you've been robbed. What was the whole point of this??, Very Sad indeed :(

I hope they get it sorted too.

OMG, is that the hacker posting copies of its user database to rapid share????

Just be fortunate that you don't have a phpbb forum, this would be good for jelsoft... More potential customers ;)

They used a security hole in phplist.

If anyone use this newsletter tool, here is the fix for this hole:

security update version 2.10.9
29 January 2009

We've released version 2.10.9 that fixes a local file include vulnerability.This vulnerability allows attackers to display the contents of files on the server, which can aid them to gain unauthorised access.

Everyone using any version up to this one is advised to upgrade as soon as possible. Any clients hosted by Tincan have already been patched or upgraded.

If you don't want to upgrade now, you can fix the vulnerability quickly by adding the following line to the top of the index file in the admin directory:

----------

if (isset($_REQUEST['_SERVER'])) { exit; }

http://www.phplist.com/?lid=274

Looks like it and much more. Shame, people like this are full of beans until they are caught & prosecuted and blubber like little babies. Shame, I'm sure they will be back to business before long a little wiser in the process.

He did, but visit the link now and it's...

Info from AREA51 (phpbb dev forum):