yabbse security bug..

[df]

if anyone else on here is not aware, and runs yabbse, there is a secuity hole...

http://www.yabbse.org/community/index.p ... adid=17919

lucky I was online when the email came in...
apparently quite a few boards got hacked... ohwell...

hmm looks like it came out on jan24... yet i had no prior notification until 10 msgs today... how.. odd...

[CESS.tk]

[weeble]how rare[/weeble]

[AGI1122]

This isn't that big of a security hole... I don't know how loading Packer.php is a security hole because it is a class... and classes can't be used from the url... and the class is only used by the code that is below is_admin(); which means it being loaded has no affect... I don't really think this is a security bug. :-\

[df]

according to the yabbse site some boards got owned, and tyhey must think its important enough to send out 12 odd emails... :/

shrugs. its fixed here anyway...

[AGI1122]

Well I guess it is better to be safe than sorry.

[smartguy240]

df it wont load for me so could someone please inform me on what i should do?

[AGI1122]

After you follow the link, click refresh.

Apparently there is a bug at the yabbse.org site...

[smartguy240]

ah ok thanks!