| Author |
 Topic  |
|
gbdg
New Member
73 Posts |
 Posted - 08 July 2001 : 19:52:30
|
Hi folks,
I'm concerned about this vulnerability. Huwr, we've corresponded - perhaps you could let me know if there is a fix (or at least let the others know if you agree that I am legit). I can't take a chance with client sites.
Thanks,
Greg
|
 |
|
|
Aznknight
Senior Member
USA
1373 Posts |
Posted - 09 July 2001 : 02:19:57
|
My main site have been hacked similiarly to webshorts last monday which I posted in the dev team only section. It was restrained to just the forums and not other parts of my site. Most of the havok was done by the hacker using one of the admin's account to delete forums and members.
Since then i've looked at the logs for pop_delete but came up empty. so i have disabled delete functions for my forums. last thursday, two of my regulars accounts were hacked. hacker mainly posted slander about myself and the site. but I've sorted things out.
I use sql server 2000 as well. i'm still a bit concerned about the security issues.
webshorts can you email me what you came up with as well? alan@iamviet.com
- Alan
www.iamviet.com
www.calvsa.net
Snitz Resource |
|
|
|
work mule
Senior Member
USA
1358 Posts |
|
|
Guru
Starting Member
32 Posts |
Posted - 09 July 2001 : 23:59:29
|
Hmmmm, interesting development.....
At one site it is a complement that Snitz is so good that even hackers are interested in the product, but this is also the downside if you are being hacked.......
I think the IMG hack should not be that big of an issue, the only thing that has to be done now, is that you have to perform a check if something is really an image....
Maybe the dynamic image stuff i saw in the non forum related forum could do the magic thing here? This can also being used in the same time to maximize the pictures size in the postings, but i'm only thinking loud now....
The fact that the forum code is on, isn't that a bigger issue? I thought hackers can do a lot of harm if the forum code is on (and it is on!)
Just some thoughts....
With regards,
Guru
|
|
|
|
work mule
Senior Member
USA
1358 Posts |
|
|
gor
Retired Admin
Netherlands
5511 Posts |
Posted - 25 July 2001 : 08:45:41
|
Both the exploit Webshorts mentioned and the IMG-tag exploit have been fixed in the code of the version 3.3
Pierre
Join a Snitz Mailinglist |
|
|
|
gor
Retired Admin
Netherlands
5511 Posts |
|
|
Topic |
|
Forum Locked
Topic Locked
