Warning to FlashChat users - security hole

[FLMom]

I am running 3.5.4, so now I know which ones to remove...didn't even think about those numbers meaning that..oops!

Thanks for the help everyone!

[MPDev]

The little buggers used the hole to install a shell script and an IRC relay service; they then went through my web directory and replaced all my index files with "you've been hacked" files. It took me a few hours to get everything off the server; but then they struck again via a security flaw in SiteBuilder - fortunately I caught that one live and stopped them before they could do anything.

You are only as secure as your weakest script; if you are like me and like to offer your users a variety of add-ons to your websites, then it makes sense you would want to keep up on any updates to those pieces. I was a version or two behind on FlashChat (update a mere few months ago).

[puertoblack2003]

is not only thru flashchat i don't even have that installed a new user subscribed to my forum and pluged this in the post look at this post here https://vborg.vbsupport.ru/showthread.php?t=125628 and look at the picture of what that user did but i beat him to the punch i was down for like 3 mins and back online

[Transverse Styles]

That's why I built www.flasherize.com, the chat can't be hacked.

[steven s]

Originally Posted by transverse

That's why I built www.flasherize.com, the chat can't be hacked.

Don't jinx yourself.:surprised:

[Adramelech]

Originally Posted by Paul M

Please don't post full exploits where everyone can see them (and then go try them ....).

Anyone with Flashchat integrated with their VB should remove all the files from /chat/inc/cmses/ except the vbulletin##CMS.php file they are using (where ## is either 30, 35 or 36) as they are not used.

So let me get this right. I just deleted EVERY file inside the directory you specified EXCEPT vbulletin36cms.php due to I run vBulletin 3.6. So this will fix the hole in Flashchat so I don't get hacked? Thanks!

[gavinzac]

deleted this piece of crap after my site was hacked and all index pages replaced.

[b6gm6n]

Im gonna remove flashchat anyways now...

-b6

[GoTTi]

if you have high traffic, use IRC server. its much better and stable for high high high traffic forums.

i went from holding 100+ users in the flash chat and laggy as hell to 600+ users in the irc server smooth sailing.

[puertoblack2003]

hey guys it 's not only flash it's the topXstat hack too i was hacked as well and i was able to recover from it i was told by steve at .com that the topXstat also has a hole so i uninstalled it and i should be ok i don't know if it had an effect of the newer for 3.6 for i still using .4.