AP forums Hacked?!??

[Kazbadan]

1st i think that is strange the fact of no one here speaking about that.

second, is there anyone able to explain what happened here?!?

[Nay]

I saw that too, I guess it wasn't a big deal.  My hubby said same thing happened at his work. Adrian was on top of it.  I wouldn't worry about.

[bounda]

wat happened i didnt see 

[Grigori]

I missed whatever it was that happened here but yessterday the authors of the forum script (SMF) released an update for a "cross-site scripting vulnerability in the search function". So someone probably tried to use that exploit here.

Simple Machines is happy to release a new update to Simple Machines Forum 1.0 and 1.1. This release addresses a cross-site scripting vulnerability in the search function. Also a few smaller issues have been addressed.

Note that the fix for the SMF 1.0.x branch will be released as new version 1.0.9, while the fix for the 1.1 RC3 branch will merely be released as patched version, the version of the forum will remain 1.1 RC3 (therefore, most of the modifications should remain compatible).

If you currently have installed 1.0.8 or 1.1 RC3, you can do either of the following to upgrade:
* Use the package manager in your administration center - one click, and you're done.
* Download the update archive file from the download page, and upload all of the files from it.
* Download the modification file, attached to this message, and modify the files manually according to it.

[Kazbadan]

i got worried about that. i tought that it was the end of AP forums due to some crazy hacker


good to know that everything is ok