wiscuba.com
Forum software attack - Printable Version

+- wiscuba.com (http://www.wiscuba.com/forum)
+--- Thread: Forum software attack (/showthread.php?tid=1940)



Forum software attack - jasondbaker - 11-18-2008

I discovered a software injection attack on the wiscuba site this morning. I first noticed the attack on the mnscuba site. I discovered that the evildoer used a vulnerability in the Coppermine gallery software to rewrite some of the SMF forum files.  Sneaky bastard.  They used this same vulnerability to patch files on the mnscuba site as well.  I upgraded the Coppermine gallery software to the latest version and I cleaned out the code changes the script kiddie made.  Hopefully he is gone.  I may need to install some extra security safeguards to ensure he was fully removed. I apologize for the inconvenience.


Re: Forum software attack - Chris H - 11-18-2008

Whatever you just said, Thanks.


Re: Forum software attack - Vtach - 11-18-2008

You cyber ninjas rock.  Go get em tiger!!