Paul said
"They broke into an old stage server, mainly used by QA for test installs of vB4 & vB5.".
If they broke into the server, the QA DB password could be gleaned by the vB config file. Hopefully it wasn't the same db user and password in use for vB.com or vB.org.
In the past, the QA team has copied the vb.com live database (or parts of it) to one of their servers, and tested installations.
Maybe that was done, and the db userid's/passwords were brought along with them. That would have given them access to the vb.com DB.
But I would think the vb.com DB has restricted access via the hosts table or something.
|