Threaded Mode | Linear Mode

***Andrew*** · (This post was last modified: 11-17-2008 01:31 PM by Andrew.)

Hello Everyone,

It's been brought to my attention that websites and forums are getting some 404 errors when browsing.

We had one here located on the registration form and probably a few other places. Some of our partner network websites have been affected along.

This is due to a vulnerability located in folders that have been CHMODed 777.

A php file with random numbers and a .htaccess file have been put into these folders, we are yet unaware of the cause of this.

We ask that if you are experiencing 404 problems, then please search all directories with the CHMOD 777 and find and delete the php file with random numbers in the file name and also a.htaccess file.

This security issue has been patched ASAP, and we apologize for any inconvenience caused.

If you need any assistance in removing these files, please just reply here.

Dalton · 11-17-2008, 01:59 PM

This happened over at MyBBSource too. Somebody inserting random images/files. He got it sorted out.. weird.. I hope somebody's reported this to the MyBB team.

chris · 11-17-2008, 10:26 PM

So this is for people using MYBB only?

***Andrew*** · 11-17-2008, 10:33 PM

No not necessarily, but they would be the most effected users i believe.

It is any folder that has the CHMOD of 777.

***danrulz98*** · 11-18-2008, 03:07 AM

(11-17-2008 10:26 PM)chris Wrote: Guests cannot see links in the messages. Please register to forum by clicking here to see links.So this is for people using MYBB only?

(11-17-2008 10:33 PM)Andrew Wrote: Guests cannot see links in the messages. Please register to forum by clicking here to see links.No not necessarily, but they would be the most effected users i believe.

It is any folder that has the CHMOD of 777.

Which would affect SMF as well

chris · 11-18-2008, 03:12 AM

(11-18-2008 03:07 AM)danrulz98 Wrote: Guests cannot see links in the messages. Please register to forum by clicking here to see links.
(11-17-2008 10:26 PM)chris Wrote: Guests cannot see links in the messages. Please register to forum by clicking here to see links.So this is for people using MYBB only?

(11-17-2008 10:33 PM)Andrew Wrote: Guests cannot see links in the messages. Please register to forum by clicking here to see links.No not necessarily, but they would be the most effected users i believe.

It is any folder that has the CHMOD of 777.

Which would affect SMF as well

Only if the folders are 777, mine are not. Using SMF.