Website hacked too...

Nuke Soldier Joined: Mar 29, 2003 Posts: 10

Hi all,

My site was hacked too, I assume with this SQL injection, since they published 10 news, all saying that I've bee hacked by the kiddies at http://www.cyberspy.org

My question is: How much is compromised by this? Do they only compromise my phpnuke, my data on my database tables, or is my system at risk.

Is it possible that I have been rootkited? If so, what should I look for?

thanks in advance,

Joined: Jan 31, 2004 Posts: -88

nothin would have been compromised. If you're being hacked at this late stage then it just goes to show what happens when you don't apply security patches that have been available for days. Razz

Anywho. Apply the patches (the Nuke 6.5 version has a download link in our homepage, and the nuke 6.0 version has a link on phpnuke.org's home page (i think)

AI

Nuke Soldier Joined: Mar 29, 2003 Posts: 10

ArtificialIntel wrote:

nothin would have been compromised. If you're being hacked at this late stage then it just goes to show what happens when you don't apply security patches that have been available for days. Razz

You're quite right. I &%$@ed myself and that gets me mad Mad

Also, sometimes keeping up with the security news is somewhat difficult. Any newsletter that you recommend so I can get this info by email?

So this hacking is in itself superficial, am I right?

ArtificialIntel wrote:

Anywho. Apply the patches (the Nuke 6.5 version has a download link in our homepage, and the nuke 6.0 version has a link on phpnuke.org's home page (i think)

Yup, as soon as I got hacked, I applied the patches for my 6.0 version. I had already apply SecFix6 and just today applied SecFix6-2, any other that I need to know about?

6.5 isn't out of the club yet huh?

thanks, AI... I feel better now Smile

Nuke Soldier Joined: Mar 29, 2003 Posts: 10

Hmm, also, I'm trying to find the upgrade to bbtonuke, from 2.0.3 to 2.0.4

I went to Tom's site and he's been hacked too Sad

Posted: Sat Mar 29, 2003 5:01 pm

Nugar wrote:

Hmm, also, I'm trying to find the upgrade to bbtonuke, from 2.0.3 to 2.0.4

I went to Tom's site and he's been hacked too Sad

There is no upgrade for Toms' port from phpBB2.0.3 to 2.0.4
The only way to have THAT particular upgrade would be to upgrade to Nuke6.5 when it releases.
You can still get to Toms' site, just not to the index page.(hacked)
go to
http://bbtonuke.sourceforge.net/modules.php?name=Forums

mikem

Nuke Soldier Joined: Mar 29, 2003 Posts: 10

Cool, thanks. Well, the wait is almost over. On what date will the 6.5 be released to the public? on abril 1st? (bad date, now that I think of it Smile

)

Posted: Sat Mar 29, 2003 5:10 pm

"abril" 1st would be OK..if he can find that month Cool

but April 1st may be fool-ish..hehe

mikem

Nuke Soldier Joined: Mar 29, 2003 Posts: 10

I'm sure he can find abril 1, after all, he speaks Spanish, and that's the name of April in Spanish.

My error. I'm not a native English speaker (just like other err... 6 billion people) and sometimes the fingers just type by themselves.

You look *so* cool pointing that out! Rolling Eyes

Posted: Sat Mar 29, 2003 6:26 pm

Nugar wrote:

I'm sure he can find abril 1, after all, he speaks Spanish, and that's the name of April in Spanish.

My error. I'm not a native English speaker (just like other err... 6 billion people) and sometimes the fingers just type by themselves.

You look *so* cool pointing that out! Rolling Eyes

well, it was funny until you poitned that out... Confused

and four years of High School Spanish here...sheesh...

mikem

Nuke Soldier Joined: Mar 29, 2003 Posts: 10

LOL!! *Now* I'm laughing! Razz

Nuke Cadet Joined: Mar 31, 2003 Posts: 2

my site too got kicked up

some anonymouse user posted i.e added a story in my site .he dont have any admin privilages and he is nothing .and he posted that my site post is got owned and it will be owned and some shits like that ...

where to get the patch for it

Major Joined: Jan 13, 2003 Posts: 892

ArtificialIntel wrote:
Anywho. Apply the patches (the Nuke 6.5 version has a download link in our homepage, and the nuke 6.0 version has a link on phpnuke.org's home page (i think)