Hack source found

The nice folks at Pipex emailed me this evening to say that they’d located the source of my website hack, from my website logs. It appears that on 9 July someone exploited a vulnerability in an old version of phpBB (I think it was 2.0.8) that was still residing on my server (albeit not being used).

The phpBB vulnerability allowed someone to upload a file (or files) to my server and execute them. I’ve no idea what they’ve been using them for: DOS attack, spamming, or just a simple site hijack?

I deleted phpBB from my server a couple of weeks ago, but too late! This evening I updated the phpBB forum on the exNYCgb website.

Published by

Gareth J M Saunders

Hi, I'm Gareth J M Saunders, 43 years old, 6' 4", married to Jane, father to twins Reuben and Joshua, and their younger brother Isaac. I'm a priest in the Scottish Episcopal Church and worship at All Saints' Church, St Andrews. I am employed as the web architect at the University of St Andrews.

One thought on “Hack source found”

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>