Forums Help hack attempt - Forums Help - vBulletin, IPB, phpBB, SMF skins and community

ForumsHelp · 09-01-2006, 05:48 PM

Hello everybody,
Forums Help was hacked today and the index page was replaced but there was no loss in form data or files.
This will make me set more secure measures in the forum during the registration process for new members.
Thanks again and sorry for the inconvinience.

twitch · 09-09-2006, 07:47 PM

Sad that people do malicious crap like that. I am glad there was no big problems or loss of data

**Adam** · 10-10-2006, 04:17 PM

He or she replaced the index page. He "defaced" your website. There was no error in the Registration, no, he got into your FTP. Might want to secure your FTP password. I have no idea who did it, so don't look at me. I just know because it's happened to me, and since then I have patched my forum up. I know how to hack, but I'm no blackhat(People who hack for fun), I am a whitehat(I give suggestions on how to secure your website.)
Hacking is illegal if you are using it for BlackHat purposes. It's legal for WhiteHat purposes though. Hope that information helped.

ForumsHelp · 10-10-2006, 04:41 PM

Thanks Adam for your reply

Well, yes he defaced the site but actually it had no relation with FTP security, it was a security bug in Flash Chat that was installed earlier and I had to uninstall it to ensure the security of the site.

**Adam** · 10-10-2006, 04:44 PM

Ah. Don't see how that could have happened.

ForumsHelp · 10-10-2006, 04:48 PM

me either but Flash Chat developers admited the presence of this bug in the same day the site was defaced along with a lot of sites that use Flash Chat.

**Adam** · 10-10-2006, 04:49 PM

Oh. Shocking. Really. :-\

ForumsHelp · 10-10-2006, 04:53 PM

yes it is, even vBulletin.com talked about it:
FlashChat and TopXStats Plugin Vulnerabilities - vBulletin Community Forum

09-01-2006, 05:48 PM	#1 (permalink)
User Profile ForumsHelp Senior Member Join Date: Apr 2006 Age: 32 Posts: 968 Total Points: 411,302 Donate My Zoints Profile My Photos: (1) My Mood:	Forums Help hack attempt Hello everybody, Forums Help was hacked today and the index page was replaced but there was no loss in form data or files. This will make me set more secure measures in the forum during the registration process for new members. Thanks again and sorry for the inconvinience.

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

09-09-2006, 07:47 PM	#2 (permalink)
User Profile twitch Junior Member Join Date: Jul 2006 Location: Alaska Age: 36 Posts: 7 Total Points: 56 Donate My Zoints Profile My Photos: (0)	Sad that people do malicious crap like that. I am glad there was no big problems or loss of data

10-10-2006, 04:17 PM	#3 (permalink)
User Profile Adam The ModFather Tournaments Won: 1 Join Date: Jul 2006 Location: The Internet and on most admin forums Posts: 228 Total Points: 2,212 Donate My Zoints Profile My Photos: (3)	He or she replaced the index page. He "defaced" your website. There was no error in the Registration, no, he got into your FTP. Might want to secure your FTP password. I have no idea who did it, so don't look at me. I just know because it's happened to me, and since then I have patched my forum up. I know how to hack, but I'm no blackhat(People who hack for fun), I am a whitehat(I give suggestions on how to secure your website.) Hacking is illegal if you are using it for BlackHat purposes. It's legal for WhiteHat purposes though. Hope that information helped.

10-10-2006, 04:41 PM	#4 (permalink)
User Profile ForumsHelp Senior Member Join Date: Apr 2006 Age: 32 Posts: 968 Total Points: 411,302 Donate My Zoints Profile My Photos: (1) My Mood:	Thanks Adam for your reply Well, yes he defaced the site but actually it had no relation with FTP security, it was a security bug in Flash Chat that was installed earlier and I had to uninstall it to ensure the security of the site.

10-10-2006, 04:44 PM	#5 (permalink)
User Profile Adam The ModFather Tournaments Won: 1 Join Date: Jul 2006 Location: The Internet and on most admin forums Posts: 228 Total Points: 2,212 Donate My Zoints Profile My Photos: (3)	Ah. Don't see how that could have happened.

10-10-2006, 04:48 PM	#6 (permalink)
User Profile ForumsHelp Senior Member Join Date: Apr 2006 Age: 32 Posts: 968 Total Points: 411,302 Donate My Zoints Profile My Photos: (1) My Mood:	me either but Flash Chat developers admited the presence of this bug in the same day the site was defaced along with a lot of sites that use Flash Chat.

10-10-2006, 04:49 PM	#7 (permalink)
User Profile Adam The ModFather Tournaments Won: 1 Join Date: Jul 2006 Location: The Internet and on most admin forums Posts: 228 Total Points: 2,212 Donate My Zoints Profile My Photos: (3)	Oh. Shocking. Really. :-\

10-10-2006, 04:53 PM	#8 (permalink)
User Profile ForumsHelp Senior Member Join Date: Apr 2006 Age: 32 Posts: 968 Total Points: 411,302 Donate My Zoints Profile My Photos: (1) My Mood:	yes it is, even vBulletin.com talked about it: FlashChat and TopXStats Plugin Vulnerabilities - vBulletin Community Forum