Oh My God Bigest WAREZ Site Is Hacked :-(

[pasanlaksiri]

This is the Site ​

 

[zCexVe]

Anthimedi deyyo ape keemata prathichaara dakvala.|-|4(k3r ta pin siddha vechchave.

 

[Michael]

Site Name??

 

[pasanlaksiri]

Site Name??

This is it

 

[northtech]

What ?!!!!!!

 

[ICE]

Anthimedi deyyo ape keemata prathichaara dakvala.|-|4(k3r ta pin siddha vechchave.

i didnt get it..

 

[coolioWiZ]

There are other sites, what I care about getting from those type of sites is ebooks and yes plenty of ebooks.

BTW that site seems to be back. Funny a hacker site got hacked.

Anthimedi deyyo ape keemata prathichaara dakvala.|-|4(k3r ta pin siddha vechchave.

1337

 

[fazaal24]

pheww!

 

[nabil]

wow.. hackers r getting better by da day

 

[tckrockz]

hehe dan normal neda

 

[pasanlaksiri]

There are other sites, what I care about getting from those type of sites is ebooks and yes plenty of ebooks.

BTW that site seems to be back. Funny a hacker site got hacked.



1337

Ya u can find tons of good E Books. Like O'Reilly. But did u ever refer them a to z.

 

[shalinda]

omg

 

[funnyguy]

actually, that site may be hacked because PhpBB (the sites software) has had an exploit. Either via SQL injection or via open variables. Nothing is fool proof.

 

[coolioWiZ]

Ya u can find tons of good E Books. Like O'Reilly. But did u ever refer them a to z.

I mostly search for medical and other science related ebooks.
Other than that it's webdesigning [html/css/php/ruby]

In the site you posted registration is needed to view posts. So I didn't try checking their posts. There are other sites which are mainly concerned about ebooks and I like that they have other topics than IT related books.

actually, that site may be hacked because PhpBB (the sites software) has had an exploit. Either via SQL injection or via open variables. Nothing is fool proof.

That was a problem with PHP not phpBB. So any PHP script can be exploited not only phpBB.
I hope it's fixed

 

[nEoN_wHitE]

ekath vbulletin ekak neda??

 

[coolioWiZ]

ekath vbulletin ekak neda??

phpBB kiyanneth forum software ekak.
eeka opensource. vbulletin wage register karanna oone ne, eth vbulletin tharam advance ne.

 

[crazer_z]

phpBB kiyanneth forum software ekak.
eeka opensource. vbulletin wage register karanna oone ne, eth vbulletin tharam advance ne.

Bro ape site ekath Vbulletin ne Meka Salli gevala wenna athi aran aththe ne otherwise e gollo warn karanawane

 

[coolioWiZ]

Bro ape site ekath Vbulletin ne Meka Salli gevala wenna athi aran aththe ne otherwise e gollo warn karanawane

mama dekka thread ekaka meka registered kiyala liyala thiennawa.

 

[funnyguy]

I mostly search for medical and other science related ebooks.
Other than that it's webdesigning [html/css/php/ruby]

In the site you posted registration is needed to view posts. So I didn't try checking their posts. There are other sites which are mainly concerned about ebooks and I like that they have other topics than IT related books.



That was a problem with PHP not phpBB. So any PHP script can be exploited not only phpBB.
I hope it's fixed

What? a PHP exploit? that does not make any sence to me.

The PHP Change log is found here http://www.php.net/ChangeLog-5.php

But there is no major security fix in PHP5. The server that the warez site must be running on might be seriously out of date.

 

[coolioWiZ]

What? a PHP exploit? that does not make any sence to me.

The PHP Change log is found here http://www.php.net/ChangeLog-5.php

But there is no major security fix in PHP5. The server that the warez site must be running on might be seriously out of date.

This is a very old problem dated somewhere in 2004.
http://www.phpbb.com/community/viewtopic.php?f=14&t=248046

By php 4.3.10/5.0.3 it's fixed so you wouldn't be able to find details about it in the top of the changelog. If you check the bottom you might see this:

Version 5.0.3
15-Dec-2004
Added the %F modifier to *printf to render a non-locale-aware representation of a float with the . as decimal seperator. (Derick)
Fixed error handling in mysqli_multi_query. (Georg)
Extended the functionality of is_subclass_of() to accept either a class name or an object as first parameter. (Andrey)
Fixed potential problems with unserializing invalid serialize data. (Marcus)
Fixed bug #31034 (Problem with non-existing iconv header file). (Derick)
Fixed bug #30995 (snmp extension does not build with net-snmp 5.2). (Ilia)
Fixed bug #30994 (SOAP server unable to handle request with references). (Dmitry)

I also think the php version of the warez site must be seriously old. Might be the reason they were struck with this password exploit. It's quite funny for a warez site