News:

Wondering if this will always be free?  See why free is better.

Main Menu

[bug]SMF 1.1.4 Attachment Mod

Started by hclloveh, January 24, 2008, 05:11:15 AM

Previous topic - Next topic

hclloveh

I'm admin of hxxp:freespacevn.com [nonactive] 's forum.
Now i want say about this bug at mod package Attachment Mod. With CHMOD 777 at folder attachments, hacker can use 1 file, upload to server and connect to mysql. For last day, at my forum have 539 members, and after hack, only 2 members.
So easy, first you 'll see result from index.php when try use file index.php: Can't find table "xxx_xxx.attachments"
So sorry for who use attachment mod. I 'll use other forum, not SMF.
Bye bye !

SleePy

Bugs in mods are not the same as bugs in SMF.
You should contact the mod author and let them know of this.
Jeremy D ~ Site Team / SMF Developer ~ GitHub Profile ~ Join us on IRC @ Libera.chat/#smf ~ Support the SMF Support team!

Advertisement: