PHP exploit making the rounds

[Epictetus]

Not sure what this forum uses, but picked this up from another forum I frequent:

If you have a website or forum that is php based you should make sure to notify your hosting provider of the following:

QUOTE
I imagine a lot of people here are running phpBB-based forums, or perhaps some other PHP-based forum. If so, make sure both PHP and phpBB are updated to the latest version. Worms are actively defacing sites and erasing web content. If you use a hosting service, make sure they've updated these two packages.

http://www.phpbb.com/phpBB/viewtopic.php?t=244451

http://www.php.net/release_4_3_10.php

http://it.slashdot.org/article.pl?sid=04/12/21/2135235


The main thing your host needs to be concerned with is the php patch listed above. I've already notified our host and they are making the appropriate upgrades, so the forum might go down for a while when the patch is being applied.

Here's a victim:
http://www.skinnersguild.com

[noodle]

this is a vbulletin based forum, but it uses php, yes.

[Faggot the Hutt]

Originally Posted by Epictetus

Not sure what this forum uses

Just look at the URL for these forums, they are PHP.

Damn clever worm too- do as the news article say, and you can search for victims using the phrase "NeverEverNoSanity."

[Bokken]

Sonuva....!!!
Thanks for the heads-up, looks like there are some updates that need to be made.