I'm running Gforum 1.2.2 and was 'hacked' yesterday.

The individual that hacked the forum changed his status to that of moderator for several sub-forums.

What is interesting about this is that it appears to have been done with a script in that when looking at the DB the time stamp for the entry into the moderator table were identical. Has anyone run into this before?

Ishmael

Hi,

We haven't seen this before, but the first thing to do is check the obious culprits: weak passwords or guessed passwords (or no password?). Then, try and get a scan through your logs for all hits from the hackers ip to try and determine what they did, and how they got in.

Cheers,

Alex
--
Gossamer Threads Inc.