Flaw in phpBB 2.0.7 search.php

Posted: Sun Mar 21, 2004 12:55 am

phpBB 2.0.7a has just been released "because of a flaw in search.php. This, under the right circumstances with certain server versions be exploited to obtain password hashes."

http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=182281

Posted: Mon Mar 22, 2004 6:01 pm

Can nuke users just go ahead and make these changes or do these three files have to be converted to nuke first?

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

They do not match with the nuke version. I had checked them over the weekend and was waiting for Chat to get back. I'll make sure he sees this post.

Posted: Mon Mar 22, 2004 8:40 pm

I have the files ready but i want to double check login.php, i might release it in an hour or less.

New Member Joined: May 29, 2003 Posts: 16

chatserv,

once again... the nuke community owes you a debt of gratitude.

I for one would like to make a donation to the chatserv fund for fixing nuke.. if there is such a thing.

Tank863

Posted: Wed Mar 24, 2004 9:03 am

I wish there was such a thing

Posted: Wed Mar 24, 2004 9:55 am

Quit being so modest and post your PayPal addy Rolling Eyes

Posted: Wed Mar 24, 2004 10:10 am

Ok great, i finally get to spam someone else's forums
there's a link to my paypal account at [ Only registered users can see links on this board! Get registered or login! ]

chatserv quickly temp bans Raven from his sites before he spams them Razz