Warning to FlashChat users - security hole

[MPDev]

GET /chat/inc/cmses/aedatingCMS.php?<exploit data>

Warning to users who use FlashChat - this script was just used to add an exploit script to my server.

[Paul M]

Please don't post full exploits where everyone can see them (and then go try them ....).

Anyone with Flashchat integrated with their VB should remove all the files from /chat/inc/cmses/ except the vbulletin##CMS.php file they are using (where ## is either 30, 35 or 36) as they are not used.

[PamelaE]

If you have already been 'hacked' into via this hole. Then do you need to do anything addtionally to resolve it ?

[Ascor]

thank you for information MPDev

[FLMom]

Originally Posted by Paul M

Please don't post full exploits where everyone can see them (and then go try them ....).

Anyone with Flashchat integrated with their VB should remove all the files from /chat/inc/cmses/ except the vbulletin##CMS.php file they are using (where ## is either 30, 35 or 36) as they are not used.

Thanks Paul for this! I removed all files but the 30, 35, and 36 because I just wasn't sure which one I needed :surprised:

[Ntfu2]

FLMom

which version of vBulletin do you use?

I'd assume 30 is for the 3.0.x series, 35 is for 3.5.x and 36 is for vBulletin 3.6

Hope that helps, and glad i dont have this anymore

[jw00dy]

Thanks for the heads up. I'm a nut about space, so these already didn't exist, but it's still great to know.

[bashy]

Cheers peeps...issues pre-resolved

[steven s]

Originally Posted by FLMom

Thanks Paul for this! I removed all files but the 30, 35, and 36 because I just wasn't sure which one I needed :surprised:

Look in your chat directory /inc/config.php

Line 55 in my file

//your CMS system
'CMSsystem' => 'vbulletinXXCMS',// defaultCMS - default CMS, blank - stateless CMS

[Rebecca217]

Thanks for posting the fix, Paul.

Rebecca