Image BBCode hacked in forum

New Member Joined: Jan 21, 2008 Posts: 19

I am running phpnuke 6.8 patched with 3.3 and Nuke Sentinel version 2.5.16. In the past 2 days, I've noticed a few posts (all the same user) in my forum had image links that no longer displayed the image. I checked the links and they have all changed to f1.grp.yahoofs.com/v1/UKHVR2Lp<snip remainder> from the original (I have backups of my db that contain the original links).

It seems that only the image links changed (and they appear to be broken links - for an image anyway). The text is fine.

Was I hacked? If so, how and to what end?

registered · Posted: Mon Mar 10, 2008 8:21 pm

yahoofs.com is a Yahoo server. I don't know why they would be changed except perhaps if you're looking at cached pages through Yahoo

Posted: Tue Mar 11, 2008 9:08 am

Nevermind...

It was the user.

Thanks Embarassed