UBB.threads PHP Forum Software Community Forums UBB.threads 6 Version 6 Support Threads Site Hacked?

Has anyone ever had their Threads 6.4 forum hacked? I have a client who's site now shows...

"This site is defaced!!!
NeverEverNoSanity WebWorm generation 10."

This is both on the main "ubbthreads.php" page and also when you go to Admin.

Did they just have their permissions set too loose or could be more serious than that?

Has anyone ever seen this kind of thing before?

Please see my answer here: https://www.ubbcentral.com/boards/showflat.php?Number=40580#Post40580

I've seen this on non-forum sites too. What it is, if your folder permissions are insecure, and a user somewhere on the server gets a phpShell type script, they can modify files and change your home pages etc....

Or, if there is a phpbb on your server anywhere that has been infected by the worm, it used that as a way to get to any writeable php file on your server, including some of your UBB.threads files.

You can reinstall your UBB.threads, but until/unless you find the files that the worm used to enter your server it'll just happen again.

http://searchsecurity.techtarget.com/originalContent/0,289142,sid14_gci1036174,00.html

You'll need to update your php then find/remove/update that phpbb.

Your UBB.threads was an innocent victim.