Error in PHP.

Cryptkeeper · Dec 23, 2004

you know santy right? the worm that trashed hundreds of sites? well... it was NOT a phbb vunribulity, it was a PHP one, and as such VB is affected by it. so before somene writes a vb expolit I would strongly suggest you do a full backup of the site and get your host to update php.

Note: To avoid confusion: this thread is not about highlight exploit. And it is not another bug in phpBB - it is bug in PHP.

--------------------------
A serious bug was discovered in php in function unserialize(). That bug can be used to cause serious damage to websites that use software that uses that function.

Unfortunately phpBB uses that function to store data in cookies, so phpBB can be exploited (so is IPB, vBulletin and almost all other php forum systems).

Affected php versions:
php 4.x up to 4.3.9 (bug fixed in 4.3.10)
php 5.x up to 5.0.2 (bug fixed in 5.0.2)

Solution:

Update php as soon as possible.

DannyITR · Dec 23, 2004

thanks Crypt!

Error in PHP.

Cryptkeeper

MR staff member

DannyITR

Administrator