UBB.threads PHP Forum Software Community Forums UBB.threads 7 Version 7 Support Security and 7.5.5

Hi all --

Just letting you know that our board was recently compromised by an attacker who seemingly gained Administrator access as a new user. They created a new account, and then somehow through POSTing some variables to the main script appeared to gain Administrator access.

I'm not ruling out a hole in PHP, some sort of other strange configuration error, or password compromise that could have been OUR fault, but thought I'd mention this in case anyone else has observed any problems.

Please send me a PM if you have had a similar recent experience, as I'd like to track down the source of this incident.

Again -- I'm not claiming there is a hole. Just suggesting that if anyone HAS seen strange activity where an outside user gained Administrator access to please mail me.

Thanks

what data was POSTed? and what was the URL ?

you may want to PM it to me, if you have it

Logs did not track POST variables, so I don't know, which is much of the problem in tracking this down.

He created a new user account.
Used a 2nd browser to POST something to ubbthreads.php 3 times.
Went back to original browser and had Administrator access.