Webshell upload vulnerability on tinyportal 0.9.8 ?!

[Samker]

Hey guys, before few minutes I was receive this mail  :

...
There is a guy on a famous russian cybercriminal forum selling a
working method to upload a webshell
on any TinyPortal 0.9.8 system. There is no patch for it, so make sure
you run your webserver with an unprivileged user
and backups the DB, just in case, you know.

Btw, it is offered here for 150$ USD :

http://forum.web-hack.ru/index.php?showtopic=94047

...

Since I don't understand what this guy want to say... , Can somebody take a look at this warning?

Thanks!

[Swampy]

Thanks for the heads up, I will be sure to pass it on.

[IchBin]

Not much we can do if we can't see what he's doing. If he's not going to divulge the method without payment, there's nothing we can do to check it out.

[Samker]

Guys thanks for reply...  :up:

Is there some New "Stable" version of Tiny Portal (as I see all other is still in BETA  ) or some version for SMF 2.0??

Regards,

S.

[IchBin]

TinyPortal has ALWAYS been beta software. Bloc still has yet to release a version labeled stable. You can get the latest download in the downloads section.

A public version for SMF2 is not released yet, and will not be given a released date.

[Swampy]

Other than your signature area I don't see a downloads area?

[IchBin]

That's probably because you're using Curve? I think I'll reset everyone to the TP theme so they can see these options. I think the options got changed some how during the move.

[Swampy]

yep, that worked!

Thank you

[Samker]

TinyPortal has ALWAYS been beta software. Bloc still has yet to release a version labeled stable. You can get the latest download in the downloads section.

A public version for SMF2 is not released yet, and will not be given a released date.

Thanks for info.  :up: but I'll rather wait for final SMF 2.0 and compatible TP version to make BIG Upgrade. Right now I have to much Visitors and to much installed Mods etc. to take a risk.

 

[Swampy]

Not wanting to be a parade pisser but in making your decision consider how looooooong we've waited for TinyPortal v1.0 beta5 and then perhaps double that for ver. 2 

I know ladies that have two babies in the time we've waited for TinyPortal v1.0 beta5, if you want a perspective.

Not complaining, just saying.  :angel: