[craig1985]

Hey guys I run a MyBB forum and know about the file upload 0day being released, does anybody have it that knows what I can do to fix my site before it gets attacked

MAny thanks in advance

[1llusion]

Hey guys I run a MyBB forum and know about the file upload 0day being released, does anybody have it that knows what I can do to fix my site before it gets attacked

MAny thanks in advance

Disable file uploads and check logs for unusual behavior

[craig1985]

Awesome thanks 1llusion, will sort it now

[Madderc]

Can I ask what that MyBB 0day is and what it can do?

[Anima Templi]

Can I ask what that MyBB 0day is and what it can do?

Read here.

http://www.hackcommunity.com/Thread-Ques...ay-exactly

[Madderc]

Can I ask what that MyBB 0day is and what it can do?

Read here.

http://www.hackcommunity.com/Thread-Ques...ay-exactly

eheh thanks, I posted that after I asked it here

[1llusion]

I've made an article on my blog about the vuln. Read it here: http://blog.1llusion.info/2013/02/mybb-f...l-and.html

[Madderc]

I've made an article on my blog about the vuln. Read it here: http://blog.1llusion.info/2013/02/mybb-f...l-and.html

Wow thanks a lot, that really did explain most of it I think.

On a side note, what exactly does file uploading do? Does it mean people sharing stuff through the forum?

[1llusion]

I've made an article on my blog about the vuln. Read it here: http://blog.1llusion.info/2013/02/mybb-f...l-and.html

Wow thanks a lot, that really did explain most of it I think.

On a side note, what exactly does file uploading do? Does it mean people sharing stuff through the forum?

File upload is... well... file upload. It is a vulnerability through which somebody can upload some stuff on your server.

[craig1985]

I've made an article on my blog about the vuln. Read it here: http://blog.1llusion.info/2013/02/mybb-f...l-and.html

Just read the article, great read