Is Your Website Safe For Browsing ?
17
Jun/090
Jun/090
Google have an interesting webmaster tool safe browsing you can use it to check from time to time if your website or server is victim of malicious software or exploits. Sometimes your server might be attacked and the owner is not aware about it,…
Some facts about the PHPList vulnerability and the phpbb.com hack
17
Jun/0923
Jun/0923
A few days ago phpbb.com was hacked through a super-globals-overwrite vulnerability in PHPList that was used by an attacker for a local file inclusion exploit. Details about the whole attack, written down by someone who claims to be the attacker, can be read here. From the explanation it seems that the PHP installation on phpbb.com was more or less a default one that was not hardened against attacks at all, but I will get into this later.