Forum: Ultima Online
Topic: TKV page hax0red
started by: GORDON

Posted by GORDON on Apr. 24 2013,22:13
The TKV page had 3 lines inserted at the bottom of the index.html redirecting to some other virus page.

Interestingly, it was done in such a way that the file characteristics did not have an updated "last edited" date.

It did not appear in my 2008 page archive, but it was in the 2011 archive.  The file itself was dated earlier in 2008 than my backup file, when I last reinstalled the forum (I guess).

Anyway, should be fixed now.  Currently replacing the entire TKV directory, just to be safe.

Also, I have a feeling the vulnerability was some java script that was put into the page by the original author.  I should probably strip that out before it gets sploited again.

Posted by Cakedaddy on Apr. 24 2013,22:32
FYI: I don't know java, at all, so, just sayin'.
Posted by GORDON on Apr. 24 2013,22:33
Some scrolling banner bullshit.  The kind of thing one used to be able to create on a "scrolling banner" generator, and then cut and paste the code into your html page.
Posted by Troy on Apr. 25 2013,08:54
Equip Bow, Run around until damage done and not healed.

Explo/Poison

Equip Heavy Xbow

HARM HARM HARM HARM!

Powered by Ikonboard 3.1.5 © 2006 Ikonboard