Login or Register :: Home :: Search :: Your Account :: Forums :: Waraxe Advisories :: Tools :: August 21, 2026 Menu Home Logout Discussions Forums Members List IRC chat Tools Base64 coder MD5 hash CRC32 checksum ROT13 coder SHA-1 hash URL-decoder Sql Char Encoder Affiliates y3dips ITsec Md5 Cracker User Manuals AlbumNow Content Content Sections FAQ Top Info Feedback Recommend Us Search Journal Your Account User Info Welcome, Anonymous Nickname Password (Register) Membership: Latest: MichaelSnaRe New Today: 0 New Yesterday: 0 Overall: 9144 People Online: Visitors: 1624 Members: 0 Total: 1624 Full disclosure [0day-rubbish] VMS 6.48.809 Authenticated command injection to root RCE (8.8) [0day-rubbish] ONE Reporter 13.1 Authenticated RCE / privilege escalation via CommandExecutor (8.8) [0day-rubbish] Gemini 7.3.0 Authenticated SQL injection to xp_cmdshell RCE (8.8) [0day-rubbish] RoboTask 11.0.5.1229 Unauthenticated REST API remote task execution (9.8) [0day-rubbish] ActiveFax Server 10.70 Unauthenticated LPD Ghostscript %pipe% SYSTEM RCE (9.8) [0day-rubbish] Tornado 2.11.3 Unauthenticated arbitrary file write to root RCE (storeTo=file: to cron) (9.8) [0day-rubbish] Datalore On-Premises 2026.2.3 Unauthenticated RCE via InteractiveReport access-mapping flaw (9.8) APPLE-SA-08-18-2026-1 Safari 26.6.1 Cudy WR3000: Hard-coded JWT Secret to Root Command Injection Security advisory: Pre-authentication RCE (SQL injection) in XPressEntry 3.7.7454 (Telaeris Inc) Security advisory: Authenticated RCE (SQL injection) in Scrutinizer 19.7.0 (Plixer) Security advisory: Pre-authentication SYSTEM RCE (Zip-Slip plugin planting) in Output Messenger Server 2.0.x (>= 2.0.63) (Srimax Software (Output Technology)) Security advisory: Pre-authentication RCE (arbitrary file write) in RapidDeploy 5.2.2 (MidVision) Security advisory: Authenticated RCE (second-order SQL injection) in Lansweeper 12.2.1.0 (web reports 12.2.1.6) (Lansweeper) Security advisory: Authenticated RCE (command injection) in Kerio Connect 10.0.9 Patch 2 (build 10320) (GFI Software) IT Security and Insecurity Portal www.waraxe.us Forum Index -> How to fix -> Can you help me? my forum has been hacked View previous topic :: View next topic Can you help me? my forum has been hacked Posted: Fri Mar 04, 2005 5:40 pm theavenger Regular user Joined: Mar 04, 2005 Posts: 5 Hello, I'm just looking for help, I had a forum with more than 100 people signed. This morning somebody has changed everything and erased most of the posts and topics, he has erased some login nicks and the admin. I know who has done it because when we banned him and changed his profile, we changed his language in that forum, and now the forum is in that language. Please, if you can help me, just write something here, i will answer immediately. Our forum was:hxxp://www.elforo.de/xenafansclub/index.php and now it appears like Attack to hacker by speaker. Sorry for the mistakes in english, i'm spanish Last edited by theavenger on Wed Mar 09, 2005 11:01 pm; edited 1 time in total A simple guide to secure a forum Posted: Fri Mar 04, 2005 6:20 pm Zeelock Active user Joined: Jan 27, 2005 Posts: 29 Location: Where stars come out at night - First use .htaccess for protection admin directory and admin files - Second use only one admin - Disable System() and any other dangerous function (if not used) - Third For forums only use (if possible) a low privileged user with no union support. And install forum for mysql 3.x. - 4 backup database files regularly If you can change .php settings disable functions like system etc.. _________________ If it seems to be impossible, just step up your level! Posted: Fri Mar 04, 2005 7:02 pm mateusz Regular user Joined: Dec 05, 2004 Posts: 17 Location: Poland yes, and you should up to date your forum simply Posted: Fri Mar 04, 2005 7:07 pm Injector Active user Joined: Dec 29, 2004 Posts: 49 http://www.google.co.uk/search?q=site:www.elforo.de+AND+phpbb+2.0.&hl=en&lr=&client=firefox-a&rls=org.mozilla:en-US:official_s&start=0&sa=N According to google your phpbb host gives out version "2.0.3" That is way out of date and theres nothing you can do really cause I think your on a free host right? (correct me if im wrong) Anyways go to another host instead there are tons of others out there Posted: Fri Mar 04, 2005 8:30 pm theavenger Regular user Joined: Mar 04, 2005 Posts: 5 thanks, so I assume there's no way to get my forum back Thank you for your help Posted: Fri Mar 04, 2005 8:33 pm theavenger Regular user Joined: Mar 04, 2005 Posts: 5 one more thing, would you be so kind of explaining the way they did that with the forum? is there any way that we can get our admin back? thanks Posted: Fri Mar 04, 2005 9:15 pm Injector Active user Joined: Dec 29, 2004 Posts: 49 login as: user: kane password: iamgod Posted: Sat Mar 05, 2005 12:53 am theavenger Regular user Joined: Mar 04, 2005 Posts: 5 Last edited by theavenger on Wed Mar 09, 2005 10:59 pm; edited 1 time in total Posted: Sun Mar 06, 2005 5:23 pm theavenger Regular user Joined: Mar 04, 2005 Posts: 5 And yesterday he came back and got the forum again, but we caught his IP and we know who he was. The forum is gone, he has erased everything, but we can make another one, that's no problem... i just would like to do the same to him thank you for your help, that was very nice from all of you Posted: Wed Apr 16, 2008 12:23 pm Urb4n Advanced user Joined: Apr 16, 2008 Posts: 55 well that is similiar to something kane on voide.org would do so go bitch at him Posted: Wed Apr 16, 2008 7:17 pm pexli Valuable expert Joined: May 24, 2007 Posts: 665 Location: Bulgaria Code: Posted: 2005-03-04, 20:40:46 Can you help me? my forum has been hacked www.waraxe.us Forum Index -> How to fix You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum All times are GMT Page 1 of 1 All Posts1 Day7 Days2 Weeks1 Month3 Months6 Months1 YearOldest FirstNewest First Select a forumSecurity Research by waraxe----------------General discussionHow to fixMetasploit relatedHash cracking requests----------------MD5 hashesAll other hashesHash related informationhttp://www.waraxe.us portal----------------SuggestionsCooperation proposalsSecurity bugs and issues in general----------------Newbies cornerSql injectionCross-site scripting aka XSSRemote file inclusionFull path disclosureShell commands injectionPhishing and Social EngineeringAll other security holesVarious software----------------PhpNukePostNukePhpBBXMB forumvBulletin BoardInvision Power Boarde107MamboJoomlaXOOPSM$ WindowsLinux worldAll other softwareCoppermine Photo GalleryProgramming languages----------------PhpMySqlPerlJavaJavascriptC and C++Visual BasicBorland Delphi and PascalPythonHTML and XMLAssemblerReverse engineering----------------Newbies cornerDisassemblingPHP script decode requestsMiscellaneous stuff----------------Future of the ITNanotechnologyFun cornerLinksTry2hack sitesProxy databaseDirect Downloads----------------ToolsTutorialsWordlistsRecycle Bin----------------Removed messagesOutdated posts Powered by phpBB © 2001-2008 phpBB Group

PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.066 Seconds