Any known issues?
Printed From: Web Wiz Forums
Category: Web Wiz Web App Support Forums
Forum Name: Web Wiz Forums
Forum Description: Support forum for Web Wiz Forums application.
URL: https://forums.webwiz.net/forum_posts.asp?TID=982
Printed Date: 30 March 2026 at 12:31am
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com
Topic: Any known issues?
Posted By: ClimbersEdge
Subject: Any known issues?
Date Posted: 13 March 2003 at 8:37am
 I would like to know if there are any known security issues with Web Wiz Forums. It may be shear coincidence, but as soon as I loaded the software on my server, I had nearly 700 attempts to access my system that were blocked by my firewall. Unfortunetly, I have discovered that the firewall was apparently breached and I have files that have been removed from my system. One of those files is the Web Wiz Forums database! Infact, that is how I discovered the system was breached... I went to work on my web forums setup and was unable to open the page because the database is completely gone! Upon further checking, I discovered many personal MP3 files had also been removed from my server. So any insights that people may have regarding security issues with this software would be great... and like I said it may have been shear coincidence.------------- Lee Lang WWW.ClimbersEdge.com WWW.WyomingOutdoorSports.com |
Replies:
Posted By: WebWiz-Bruce
Date Posted: 13 March 2003 at 8:50am
|
In documentation in details how to make the database secure. Also it shouds like you need some basic server security protection, make sure the IUSR account has read only permissions on all directories that can be reached by a web browser or a hacker will be able to use tools available on the net to delete, upload, etc. files within your site. ------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting |
Posted By: ClimbersEdge
Date Posted: 13 March 2003 at 1:39pm
|
I had the permissions set as per your docs. I also have a netgear hardware firewall in line. So I am a little surprised that the system was accessed. I use a dynamic DNS server, so the hacker was able to track the system down even though I kept changing IP addresses... that is why I was wondering if the forum software has something that would help a person track the system with changing IP addresses... unless they were specifically going after a URL that is not published yet (to speak of) ------------- Lee Lang WWW.ClimbersEdge.com WWW.WyomingOutdoorSports.com |
Posted By: faubo
Date Posted: 13 March 2003 at 5:06pm
|
Nope, WWF is as secure as one DB in the web can be (if you follow the security tips) It's almost certain a problem with the server, someone hack it, or someone know your login and pass. ------------- http://www.conhecerparaconservar.org - I don't know how to make you click here |