My board was hacked

[The Keeper]

I think my board was hacked. They didn't destroy anything on the forum - but one of my members posted a snapshot of a private (moderator) forum.
One of my moderators asked where he got the pic from, and his best friend (who is I think is also a vb owner and knows a lot about computers and security) replied:

INSERT INTO moderator VALUES ('12', '231', '5', '0', '0', '1', '1', '1', '1', '1', '1', '0', '0', '0', '1', '0', '0', '1', '1');

EDIT: Though what does it matter? He has it etc...

Is it possible he's found a way to hack into the database?

I'm running 2.2.4

[NTLDR]

Thats the statement for adding a moderator, but unless he has a way to run queries on your DB its useless.

[Xenon]

well you should really upgrade to vb227 there are some security fixes in it...

[Erwin]

2.2.4 is not secure. Upgrade to 2.2.7.

[The Keeper]

I've upgraded now, but I need advice on what to do with such a member? I really have no proof he hacked, but I do know he posted a pic of something he shouldn't have access to.

[Xenon]

well i'd show him the yellow card.....

[Neo]

2.2.7 isnt secure. I hacked my 2.2.7 board a few times and got access to the admin area.

[Xenon]

i hope you've told this infos to the developers

[The Keeper]

This is dissapointing to know.
Do you guys have any idea how this hacking on my forum may have happened?? Through admin area? I am led to believe he was able to procure other data from the database including IP addresses.

If it was through the admin area, I've now passworded that directory, hopefully that will stifle attempts, but if he has my admin password, then what's the point anyway

Is there anything I can do about this, like report it to some authority, if I'm able to collect evidence?

[Steve Machol]

Originally posted by Neo
2.2.7 isnt secure. I hacked my 2.2.7 board a few times and got access to the admin area.

If you have evidence of this then please send it to support@vbulletin.com. Include the exact steps you are using to hack your 2.2.7 forum.