Archive for February, 2009

Some facts about the PHPList vulnerability and the phpbb.com hack

Friday, February 6th, 2009

A few days ago phpbb.com was hacked through a super-globals-overwrite vulnerability in PHPList that was used by an attacker for a local file inclusion exploit. Details about the whole attack, written down by someone who claims to be the attacker, can be read here. From the explanation it seems that ...