I do know ubb threads 6.x has a security risk in one of the scripts.
I believe it is "addpost_newpoll.php".
Yes you are correct. I also think there was or still is a security risk on the Threads where it points from the old classic to the threads on the import script. This is not an issue with my threads boards as I have a direct forward to the new board from the old one without integration between them.
The "addpost_newpoll.php" security risk allowed people to gain several types of access to your boards including spamming without an account on the system. I see several attempts on this security hole daily even though the problem has been fixed a long time ago.
No matter what your running or how good it is your always open to some sort of exploit if someone really wanted to take the time to find one.
Previous Topic
Index
