FAO anyone running Invision Power Board

[Beansprout]

Urgent 2.x.x security update available!

My forums just got owned by said security hole. Not exactly sure what happened yet as the network security folks noticed it before we did....which makes me a bit uneasy.....I just hope NASA have backups...if they don't, well, how can they make rockets fly

 

[Beansprout]

SQL injection and arbitrary code execution. And look what IPB say!

(This is generated from a URL unique to each IPB forum, and displayed in the admin panel)

I'm mad. Very mad. And I've said some very rude words in the forum's IRC

Note: It's not my job to update the forums, infact I don't even have access to the IPB downloads, so I can't really do much apart from poke the people who do. One is on holiday and the other is in a different timezone, so infact I couldn't have done anything anyway.

 

[Inquisitor]

Ouch, those are some pretty bad security holes

 

[Beansprout]

Buahahaha, we return!

This time with vBulletin 3.5. And a whole bunch of work to do to restore things the import messed up, let alone go through the forum configuration (though it's mostly done by the importer).

Didn't lose any data

vBulletin is stunning...I mean, the code must be liquid because it seems there's nothing you can't change

Last time I played with vB was with vB2, aaages ago

And running this on our new dual 3Ghz Xeon with a bucket of RAM, MySQL/PHP 5, lighttpd, eAccelerator & 450mbit/sec bandwidth is....fun

Sorry, boy with new toy. And a big grin

 

[sfx]

I have always used vBulletin myself, it is a lovely bit of Software. I used IPB once and removed it after about an hour I though it was that good.

sfx