WARNING

anunlike · April 19, 2006, 02:14:40 AM

Bloc just posted the fix for this here: http://www.tinyportal.net/smf/index.php?topic=4440.0

MitchÃƒÂ¢Ã¢â‚¬Å¾Ã‚Â¢ · April 19, 2006, 02:36:56 AM

So if we dont show the shoutbox will we be ok?

JayBachatero · April 19, 2006, 02:59:34 AM

Yes you should be on if you have the shoutbox disabled. Just to be on the safe side apply the patch.

bloc · April 19, 2006, 08:19:52 AM

It is/was only active when you allow guests shouting. Thats also why I missed that hole - its some code I haven't looked at for some while.

JayBachatero · April 19, 2006, 08:49:31 AM

I don't allow guests to shout (it was getting spammed). The person registered as exploit and exploited my forum.

bloc · April 19, 2006, 10:05:58 AM

So he registered and still managed to post a message which re-directed the site?

JayBachatero · April 19, 2006, 05:38:05 PM

Yea he registered and posted the redirect. Same happened to agridocs site. That's when I found out about my site.

palorber · April 23, 2006, 05:27:48 PM

Same thing happened to me. I

They registered as ertan... His IP is 85.106.142.123
Host name: dsl85-106-36475.ttnet.net.tr