https://www.icyphoenix.com/viewtopic.php?f=35&t=1811
-----------------------------------
PTKTheBest
Wed 02 May, 2007 21:21

0day - IcePhoenix
-----------------------------------
========= ENGLISH =========

Hi,
Sorry but i don't speak english
My forum ([url=http://fpf.helloweb.eu/]link) is hacked to the control pannel (acp -- forum -- generale).
It is a bug, correct it, Please! >.<

Look this image: http://www.ptkweb.it/uploader_s1/forum.png


========= ITALIANO =========

Ciao,
Scusatemi ma mi hanno hackerato il forum ([url=http://fpf.helloweb.eu/]link) nel pannello admin (acp -- forum -- generale)
E' possibile correggere il bug o quello che è, perfavore >.<

Guardare l'immagine: http://www.ptkweb.it/uploader_s1/forum.png


-----------------------------------
tonyf12
Wed 02 May, 2007 21:30

Re: 0day - IcePhoenix
-----------------------------------
Try reupload your whole admin folder. And change your ftp password.


-----------------------------------
PTKTheBest
Wed 02 May, 2007 21:31

Re: 0day - IcePhoenix
-----------------------------------
[quote user="tonyf12" post="13241"]Try reupload your whole admin folder. And change your ftp password.[/quote]

i know, i did it


-----------------------------------
tonyf12
Wed 02 May, 2007 21:34

Re: 0day - IcePhoenix
-----------------------------------
Does it work afterwards?

If it doesn't work afterwards, Seph1roth is a very common virus for forums so I would ask at a forum that has a larger support community like phpbb.com or vbulletin.com because from what I can gather it affects every forum software that has an ACP


-----------------------------------
Vortex
Wed 02 May, 2007 21:40

Re: 0day - IcePhoenix
-----------------------------------
[quote user="PTKTheBest" post="13242"][quote user="tonyf12" post="13241"]Try reupload your whole admin folder. And change your ftp password.[/quote]

i know, i did it[/quote]


And still doesn't work?


If you didn't modify anything by yourself, try to backup config.php and includes/def_*.php and then reupload folders till you get it working again... 


PS: In attesa che qualcuno più competente di me possa aiutarti... Se per te non è un problema credo che faresti bene a salvare tutti i file così come sono (con il forum hackato) e sentire se puoi inviarli a Mighty, può servirgli per scoprire cosa ti hanno modificato e magari patchare il problema ;)

I think you should save your forum as it is and send it to Mighty in order to patch the security issue...


-----------------------------------
PTKTheBest
Wed 02 May, 2007 21:45

Re: 0day - IcePhoenix
-----------------------------------
They have stolen our admin password yesterday ( now the password has been changed ). 
Today  is ok ;-)


Sorry  :cry:


-----------------------------------
Mighty Gorgon
Sun 06 May, 2007 17:48

Re: 0day - IcePhoenix
-----------------------------------
If it was stolen the password it is not an Icy Phoenix issue... but if it happens again, please keep us informed.


-----------------------------------
Seph1roth
Wed 06 Jun, 2007 14:21

Re: 0day - IcePhoenix
-----------------------------------
Big big big => LOL !!

[color=red]ReadMe Please[/color] => Hi all , i'm Seph1roth , i'm not a virus but Human :) 

PTKThebest u got Hacked coz u don't have respect of all people ... u think that u are the best of all :) then u got pwned by Italian Black Hats Hackers ... 

Its better that u start to listing peoples who tells to you that ur site have flaw ... and not responding "tell me where is the bug that i fix it by myself " :S

keep your eyes open and be friendly with Seph1roth and the other Black Hats ... :))

Bye All !


-----------------------------------
KugeLSichA
Wed 06 Jun, 2007 17:47

Re: 0day - IcePhoenix
-----------------------------------
Hello [b]Seph1roth[/b],

did you got access to PTKThebest´s ACP because of an security hole in IcyPhoenix?

If so, can you tell us where it is?

thx


-----------------------------------
Seph1roth
Wed 06 Jun, 2007 22:08

Re: 0day - IcePhoenix
-----------------------------------
Hello bro ... there is no bug in icy phoenix at the moment ... the admin was stupid and i've bypassed his security throug privilege escalation...
if in the future i found some bug i report to you ;)

Seph1roth //

Italian Black Hat //


