<![CDATA[PunBB Forums — SECURITY! Vulnerability]]> https://punbb.informer.com/forums/topic/26510/security-vulnerability/ Thu, 16 Jan 2014 17:52:52 +0000 PunBB <![CDATA[Re: SECURITY! Vulnerability]]> https://punbb.informer.com/forums/post/150923/#p150923 my host/ ftp password is not the same as my site admin passoword... so im clean there.

]]> Thu, 16 Jan 2014 17:52:52 +0000 https://punbb.informer.com/forums/post/150923/#p150923 <![CDATA[Re: SECURITY! Vulnerability]]> https://punbb.informer.com/forums/post/150922/#p150922 Check server access logs. Check ftp logs.

]]> Thu, 16 Jan 2014 17:44:38 +0000 https://punbb.informer.com/forums/post/150922/#p150922 <![CDATA[Re: SECURITY! Vulnerability]]> https://punbb.informer.com/forums/post/150918/#p150918 a) password was medium... how ever isnt that easy to guess it...
b) poorly extension ( seo from quadric - idk if is or ist not poorly, isnt working for me thats for sure - its disable... )
c) xss maybe, i dont know anything about this...
d) my host provider is pretty solid i see, not to big or known.. site work pretty good...

can be from the skin ? i did edit the skin alot, can be there some issue ? i intend to release it, but not if can has sopme issues with security....

]]> Thu, 16 Jan 2014 16:27:39 +0000 https://punbb.informer.com/forums/post/150918/#p150918 <![CDATA[Re: SECURITY! Vulnerability]]> https://punbb.informer.com/forums/post/150913/#p150913 Currently there are no known vulnerabilities in the forum engine.
http://secunia.com/advisories/search/?search=punbb

]]> Thu, 16 Jan 2014 09:41:31 +0000 https://punbb.informer.com/forums/post/150913/#p150913 <![CDATA[Re: SECURITY! Vulnerability]]> https://punbb.informer.com/forums/post/150912/#p150912 I am quite sure that punbb is not the problem here. I see 4 possibilities:

a) Your password was easy to guess -> f.e. account "admin", password "admin",

b) You have installed a poorly written extension.

c) Not forum, but your website is XSS vounerable. Someone may deleted all your data using vounerability found in your website.

d) I don't know on what server your website/forum is hosted. Are you sure, you can trust the company responsible for hosting?

]]> Thu, 16 Jan 2014 08:08:22 +0000 https://punbb.informer.com/forums/post/150912/#p150912 <![CDATA[Re: SECURITY! Vulnerability]]> https://punbb.informer.com/forums/post/150910/#p150910 rename what? the extension.. isnt working anyway... now i have to re-install the forum sad password change and the forum dont send me a new pass....

]]> Wed, 15 Jan 2014 20:23:09 +0000 https://punbb.informer.com/forums/post/150910/#p150910 <![CDATA[Re: SECURITY! Vulnerability]]> https://punbb.informer.com/forums/post/150909/#p150909 just rename in admin setting

]]> Wed, 15 Jan 2014 19:56:25 +0000 https://punbb.informer.com/forums/post/150909/#p150909 <![CDATA[Re: SECURITY! Vulnerability]]> https://punbb.informer.com/forums/post/150908/#p150908 none installed...
i do have one extension uploaded, but is disable

SEO Optimizer (quadric_seo_optimizer)

]]> Wed, 15 Jan 2014 19:43:03 +0000 https://punbb.informer.com/forums/post/150908/#p150908 <![CDATA[Re: SECURITY! Vulnerability]]> https://punbb.informer.com/forums/post/150906/#p150906 what ur ext installed?
hacker can only inject script on extension sad

]]> Wed, 15 Jan 2014 19:16:00 +0000 https://punbb.informer.com/forums/post/150906/#p150906 <![CDATA[SECURITY! Vulnerability]]> https://punbb.informer.com/forums/post/150904/#p150904 My site has 2 weeks old, and 1 week with punBB.. IT WAS HACKED.

PunBB is not SAFE anymore! The guy who hacked it, it was to bord to destroy the site (is empty) and he left only title and desciption yikes

http://s30.postimg.org/pk9g6k8qo/image.jpg

http://s30.postimg.org/4yuoenr5s/image.jpg

]]> Wed, 15 Jan 2014 18:06:14 +0000 https://punbb.informer.com/forums/post/150904/#p150904