* 
Welcome Guest. Please login or register.
Did you miss your activation email?


*
gfxgfx Home Forum Help Search Login Register   gfxgfx
gfx gfx
gfx
Pages: 1 [2]
Print
Author Topic: Hacked Page Issues  (Read 11539 times)
0 Members and 1 Guest are viewing this topic.
Artimidor Federkiel
Administrator
****

Gained Aura: 538
Offline Offline

Gender: Male
Posts: 23.091



View Profile Homepage
« Reply #15 on: 09 March 2007, 23:36:57 »

It's still a mystery how the front page could be replaced.

Well, the regular page is back online now and I've made security backups of the Dev and the RPG board. A virus scan on the server didn't produce any results, so no files were altered except the front page. Our SMF software is also up to date with release 1.1.2 and TinyPortal  is still at 0.9.7, this is the most recent version. I haven't seen any evidence that others have trouble with these Forum versions. Forum permission settings seem to be in order as well.

[LATEST NEWS] Found something at the Lazarus guestbook forums: "A cross site scripting vulnerability exists in Lazarus that allows hackers in. Unfortunately it applys to all versions." - obviously discovered just recently in March 2007. Fix exists already.

I will try to look into that and update the guestbook. Actually we're several versions behind, so I need to do a bunch of updates.
« Last Edit: 10 March 2007, 00:04:58 by Artimidor Federkiel » Logged



"Between the mind that plans and the hands that build there must be a mediator, and this must be the heart." -- Maria (Metropolis)
Artimidor Federkiel
Administrator
****

Gained Aura: 538
Offline Offline

Gender: Male
Posts: 23.091



View Profile Homepage
« Reply #16 on: 10 March 2007, 01:02:39 »

Ok, that should do it. I've run five updates on the guestbook and restored its appearance. It also seems to be still functional...  grin

Anyway, I've also cleared it completely of various files that had no place in there. Actually I found them all - the zip file that was copied into a subfolder of the guestbook, and the files it extracted and then copied to replace the main page. It also attempted to collect guestbook e-mail addresses and prepare them to be collected. For sure an automatic scan discovered the hole and got in, as the second file was copied practically at the same time at the next day.

Anyway, I've removed it all (and wonder why the server virus scan didn't spot anomalies) and brought it up to date - let's see what kind of hacker message awaits us tomorrow, or not!  huh
Logged



"Between the mind that plans and the hands that build there must be a mediator, and this must be the heart." -- Maria (Metropolis)
Scael Pelegrene
Newbie
*

Gained Aura: 0
Offline Offline

Gender: Male
Posts: 13



View Profile
« Reply #17 on: 10 March 2007, 03:14:55 »

Good work!  We all appreciate your diligence, Artimidor.

Scael Pelegrene
Logged

“I hold a beast, an angel and a madman in me, and my enquiry is as to their working, and my problem is their subjugation and victory, downthrow and upheaval, and my effort is their self-expression.” - Dylan Thomas
Pages: 1 [2]
Print
Jump to:  

Recent
[27 March 2019, 00:01:57]

[21 June 2018, 14:28:00]

[31 May 2017, 06:35:55]

[06 May 2017, 05:27:04]

[03 April 2017, 01:15:03]

[26 March 2017, 12:48:25]

[15 March 2017, 02:23:07]

[15 March 2017, 02:20:28]

[15 March 2017, 02:17:52]

[14 March 2017, 20:23:43]

[06 February 2017, 04:53:35]

[31 January 2017, 08:45:52]

[15 December 2016, 15:50:49]

[26 November 2016, 23:16:38]

[27 October 2016, 07:42:01]

[27 September 2016, 18:51:05]

[11 September 2016, 23:17:33]

[11 September 2016, 23:15:27]

[11 September 2016, 22:58:56]

[03 September 2016, 22:22:23]
Members
Total Members: 1019
Latest: lolanixon
Stats
Total Posts: 144586
Total Topics: 11052
Online Today: 47
Online Ever: 700
(23 January 2020, 20:05:39)
Users Online
Users: 0
Guests: 30
Total: 30

Powered by MySQL Powered by PHP Powered by SMF 1.1.21 | SMF © 2005, Simple Machines
TinyPortal v0.9.8 © Bloc
Valid XHTML 1.0! Valid CSS!
Theme based on Cerberus with Risen adjustments by Bloc and Krelia
Modified By Artimidor for The Santharian Dream
gfx
gfxgfx gfxgfx