PhpBB EXPLOIT fix ASAP

[Peter]

Think this is the best place for this but anyway a bug was found a while back in phpBB and should be fixed ASAP.

The bug itself is to do with the highlighting system all detasils on how to do the fix is located at http://www.phpbb.com/phpBB/viewtopic.php?t=240513 (just 1 file edit)

 

[Question?]

i didnt know phpBB worked off ASP i thought it was php some one help!!!! im being seriouse lol

 

[Peter]

please please tell me where you say im being serious you are not being serious hehe

But on a serious note this looks like a major bug that can cause someone to execute malicious code on the server which could basically do anything included dropping a database or deleting files on the server (in fact the person who discovered this bug had files deleted on their server and was accused of doing it themselves by their ISP).

 

[DuffMan]

Wow, this is a huge surprise, especially after the dev team said the exploits were fake. Anyone know if this bug affects all versions of phpBB? (I'm running an early 2.0.x on one of my sites.)

 

[Peter]

yes it does,

 

[Redleg]

Wow, this is a huge surprise, especially after the dev team said the exploits were fake. Anyone know if this bug affects all versions of phpBB? (I'm running an early 2.0.x on one of my sites.)

You should upgrade to v2.0.11 ASAP.

Read this thread about it:
http://www.namepros.com/showthread.php?p=369274

 

[peaudecastor]

Thanks a lot.

Mass-mailed my webhosting user and fixed my own.

Cheers,
Matt

 

[DuffMan]

Weird, I just upgraded and when I try to login or go to the admin panel I get sent to microsoft.com. What's up with that?

EDIT: Looks like it sends me to Microsoft.com after I login or logout, and when I try to access the admin panel when not logged in. I've checked my settings and they're fine.

 

[Peter]

are you sure it only happens on your forum, check your pc with an antivirus etc.

I very much doubt the update would cause this unless you did not download it from the official site.