Hacked... help!!

[SpaceCadetCira]

My site has been hacked: http://forum.bosoxbabes.com

It seems as though only forumdisplay.php is affected, because the other pages of my site are coming up fine. Also, I can't log in to my admin account (I am the only administrator on my site)...

HELP!!! I have no idea what to do about this. Write back, or e-mail me at: [email protected]... thank you!!!

[Shadow Duelist]

You can do this:

Go to phpMyAdmin, go into the user table, click on your name, and change the usergroup ID to 6.

(I think it'll work.. not sure though)

[Scott MacVicar]

Moving to vBulletin 2 forum.

An email was sent out last week regarding these problems, you should see http://www.vbulletin.com/forum/showthread.php?t=108741 for more information.

[SpaceCadetCira]

oy

I'm in PHPMyAdmin right now... I've never used this before, so bear with me. I clicked on the user table, but I don't see my name... I don't see anyone's names from my forum... do I need to set up where my forum is installed??

[Shadow Duelist]

Scott, I would like to ask something I've always wanted to ask a developer..

Why is the calender so.. hackable? IPB updated theirs, phpBB updated theirs, now vBulletin.. why is it so unsecure?

[SpaceCadetCira]

So confusing..

I am in usergroup #6.

[Zachery]

Its been updated for ages, Not everyone updates.

[Scott MacVicar]

It was a similar bug that affected all 3 products though I suspect it was the same user who reported it, this was originally sent out in January this year but quite a few people ignored the updates.

[Steve Machol]

The hacker probably changed your password. Try this query:

UPDATE user SET password = MD5('mypassword') WHERE userid = #;

Obviously replacing mypassword and # with the correct values.

[kevinrstruck]

Same thing here. Changed my password and forwarded my Forums link to a Arab site.

I upgraded from 2.3.4 to 2.3.5 but my forums link still goes to that Arab page. How can I fix that?

I checked my forums in the CP and everything is still there.

Update: OK - Had a brain freeze, they just hacked my forumhome template. Reverted back to original and everything is back to normal.

I amkeeping my baord down until someone tells me 2.3.5 is not being hacked either.

[Steve Machol]

This particular exploit will not work with 2.3.5 and I haven't heard of any forums running that version that have been successfully hacked.

[kevinrstruck]

Thanks Steve