If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)

Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie

Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

What exploit was used?

digme · 2010-01-30 00:59:30

Just wondering how this place got compromised? XSS,SQL injection,remote code execution,Internet explorer?

30-01-2010 12:59am

#1

digme

Closed Accounts Posts: 4,584 ✭✭✭

Join Date: December 2009

Posts: 4174

Just wondering how this place got compromised?
XSS,SQL injection,remote code execution,Internet explorer?

0

Comments

#2 30-01-2010 2:22am

Random

Closed Accounts Posts: 19,080 ✭✭✭✭

Join Date: September 2004

Posts: 16669

it's all being discussed here http://www.boards.ie/vbulletin/showthread.php?t=2055806686

0
#3 30-01-2010 2:49am

digme

Closed Accounts Posts: 4,584 ✭✭✭

Join Date: December 2009

Posts: 4174

Thanks,so I'm guessing the admin account of the operating system was compromised,then it was done offline or known to someone else perhaps?Interesting.

0
#4 30-01-2010 2:38pm

KoolKid

Moderators, Home & Garden Moderators, Technology & Internet Moderators Posts: 24,789 Mod ✭✭✭✭

Join Date: August 2006

Posts: 24128

Follow the link & it will tell you.
This is the timframe of the start of it.

11:22 – Administrative account compromised

11:22 -> 11:34 – Administrative account used to insert malicious code into our software

11:34 – User table dumped to public directory and downloaded

As there is an ongoing investigation I would not expect much more details at the moment.

0
#5 31-01-2010 8:51pm

Conor

Closed Accounts Posts: 2,479 ✭✭✭

Join Date: April 2003

Posts: 2430

Yep, as koolkid says, we're not going to discuss details of the attack until the Garda investigation is finished.

When that's all done, I'll try to answer as many questions as I can.

0