[1.7.0] Exploit found in lib/phpbb.php

by **zanix** » Mon Jul 17, 2006 10:36 am

I have just been notified that there is a servere bug in this file
lib/phpbb.php

Please delete this file from your servers untill a fix can be found!

by **zanix** » Mon Jul 17, 2006 10:45 am

The bug has been identified as a remote inclusion attack
With this bug, it is possible for someone to gain access to the server roster is installed on

This file will be updated in rosterdiag, and available for download via our downloads area when it is fixed

In the meantime, please remove this file from your server
If you have configured roster to use phpbb auth, you will have to disable it when you remove this file

by **zanix** » Mon Jul 17, 2006 11:14 am

A fix has been posted in WowRoster > Patched Files in the downloads area
http://www.wowroster.net/Downloads/details/id=33.html

You can also get this update via RosterDiag

[1.7.0] Exploit found in lib/phpbb.php

[1.7.0] Exploit found in lib/phpbb.php

Exploit found in lib/phpbb.php

Exploit found in lib/phpbb.php

Who is online