Site Links
Home
Features
Documentation
Pricing & Order
Members Area
Support Options
UBBDev.com
UBBWiki.com
Who's Online
2 registered (57-Vette, Chosen), 43 Guests and 14 Spiders online.
Key: Admin, Global Mod, Mod
Featured Member
Registered: 03/24/10
Posts: 8
Top Posters (30 Days)
Ruben 50
DennyP 24
Gizmo 23
Dunny 15
SteveS 13
AllenAyres 12
dbremer 10
SD 10
drkknght00 9
doug 8
Latest Photos
OK Corral Shoot Out
Testing
Basildon Train Station
Basildon Town Centre looking from the rounderbout
Basildon Town Square
Topic Options
#243840 - 06/11/11 03:32 PM Forum Hack?
ShiftKnowledge Offline
member
Registered: 04/09/11
Posts: 140
Does anybody know how this person got past the limit for subject text?

Top
#243842 - 06/11/11 03:57 PM Re: Forum Hack? [Re: ShiftKnowledge]
Ruben Offline

Registered: 12/20/03
Posts: 4424
Loc: Lutz,FL
Must be a different forum than the url you gave me before.
But anyway possibly you have html enabled for that board
_________________________
Blue Man Group
Top
#243843 - 06/11/11 04:00 PM Re: Forum Hack? [Re: ShiftKnowledge]
ShiftKnowledge Offline
member
Registered: 04/09/11
Posts: 140
I looked at the source but I didnt see any HTML changes in the span



<span id="subject0">megapixel game site megapixels memory cards megapixels 14 conversion megapixels to megabytes canon cameras 12.1 megapixels megapixels studio rates megapixel and photo size megapixels and image sizes kodak 12.2 megapixels md41 megapixel lens calculator megapixel video camera bold 9700 megapixels megapixels 12.1 how many megapixels do i need for a poster megapixels memory chart</span>
</b>
Top
#243844 - 06/11/11 04:13 PM Re: Forum Hack? [Re: ShiftKnowledge]
Ruben Offline

Registered: 12/20/03
Posts: 4424
Loc: Lutz,FL
Not sure where you got that from.
Possibly view source in a browser?
But it is html
and
<span id="subject0">
does not look native to ubb.
Try editing the post and see if you can see what is embedded in the topic and post.
_________________________
Blue Man Group
Top
#243846 - 06/11/11 05:11 PM Re: Forum Hack? [Re: ShiftKnowledge]
ShiftKnowledge Offline
member
Registered: 04/09/11
Posts: 140
its not on my site so I don't have the privileges to edit it.

here is the site

http://forum.surfermag.com/forum/postlist.php?Cat=0&Board=UBB1&page=0


Edited by ShiftKnowledge (06/11/11 05:21 PM)
Top
#243848 - 06/11/11 06:23 PM Re: Forum Hack? [Re: ShiftKnowledge]
David Dreezer Offline

Pooh-Bah
Registered: 07/21/06
Posts: 2199
version 6.5 is pretty put of date. Currently the topic title field in the database is varchar(255). I suspect it was back then too. Any restrictions in topic length via the form can be bypassed, and there surely was nothing in the actual scripts back then that would have limited it.

In other words, no, it wasn't hacked.


Edited by David Dreezer (06/11/11 06:24 PM)
_________________________
This thread for sale. Click here!
Top
#243849 - 06/11/11 06:59 PM Re: Forum Hack? [Re: David Dreezer]
ShiftKnowledge Offline
member
Registered: 04/09/11
Posts: 140
I know from experience that you can only use about 40 chars or less for the subject title so its got to be a script.
Top
#243850 - 06/11/11 08:15 PM Re: Forum Hack? [Re: ShiftKnowledge]
SD Offline
Registered: 04/19/07
Posts: 4056
Loc: SoCal, USA
fairly easy to hack 6.5, or if you will, bypass perceived safety of the forum software and break the rules...

matter of fact, up until 7.4 there were some holes that could be breached.

wink
_________________________

Threads tutorials . Threads & Wordpress experts . UBB resume

If I you, click this link as to why
Top
#243852 - 06/11/11 09:52 PM Re: Forum Hack? [Re: ShiftKnowledge]
ShiftKnowledge Offline
member
Registered: 04/09/11
Posts: 140
so you are saying its probably very easy to get admin passwords etc as well?
Top
#243853 - 06/11/11 10:14 PM Re: Forum Hack? [Re: ShiftKnowledge]
SD Offline
Registered: 04/19/07
Posts: 4056
Loc: SoCal, USA
i know there was a flaw in how certain form submitted data was handled.

rather than go into details, the prudent thing would be to upgrade to 7.5.6, imho

then there are no questions

and 'very easy' is a relative term. 'joe blow' off the street would never get in, but....... you get the drift..
_________________________

Threads tutorials . Threads & Wordpress experts . UBB resume

If I you, click this link as to why
Top



Shout Box

Today's Birthdays
No Birthdays
Recent Topics
Temporary Password email not being received
by
05/24/12 10:02 PM
Ability to "like" individual posts (not Facebook "likes)
by doug
05/23/12 09:03 AM
Island Permissions
by ThreadsUser
05/22/12 03:03 PM
streaming video
by prkrgrp
05/20/12 07:02 PM
New Posts Corrupted? Can someone help?
by PianoWorld
05/19/12 09:41 AM
Forum Stats
10492 Members
36 Forums
33842 Topics
181709 Posts

Max Online: 978 @ 06/24/07 11:19 PM
Random Image