On Wed, 4 May 2005, Scott Harney wrote:

> phpBB forums below v2.0.13 ARE being actively attacked by automated scripts. 
> I cleaned one up recently.  If you're running that version, I'd be surprised 
> if you weren't yet compromised.   You might not have noticed because it 
> hasn't put any additional load on your box.
>
> Seen it, in the real world.  Was able to determine that the phpBB2 was 
> exploited on the same day as the patch release to fix the vulnerability 
> (timestamps on the original files and processes)

Ditto.  We had to clean up some phpBB installs a few weeks ago after they 
were exploited.  I'd be very surprised if you weren't hacked already. 
You need to quit reading your email right now and go upgrade. :)

ray

Reply via email to