Still Hacked? -- Nuke or phpBB? -- Patches Installed

Nuke Cadet Joined: Apr 10, 2003 Posts: 1

I have been hacked very recently. Frustrating as whoever did it pruned all posts in my phpBB, and deleted all forums *no backups* as that section was only up for a few days, but had hundreds of posts...

They got into my admin section as they messed up my configuration, changing titles, slogans, languages... etc.

I was certain I had applied all the 'known' patches to phpBB (2.0.3) and phpNuke (6.0) to date.

Yes, I did the news and [img] hack patches, but... still didn't.

Is there any way to figure out how it was done? -- The system itself has not been compromised, I've verified that.

Also, my config.php is owned by root.root with only read permissions (not write)... yet the file can still be changed via web-browser. Browser is running by user: apache and apache is not in any groups with root... so how is that possible?

Thanks for the _QUICK_ response!

Major Joined: Jan 13, 2003 Posts: 892

There where some not so publicized expoits of phpbb2.03 and older that is why the port of 2.04 was turned out at warp speed.

AOL Keyword "Upgrade"