YaBB SE 1.5.2

[el-brujo]

What about this?

[moderator edit: although this is not really a hole, please don't post holes here... some people might be vulnerable to them.  And this one just serves to scare people, despite not actually working.

-[Unknown] ]

[el-brujo]

okz, okz, i'm just asking.

If you say me it hole doesn't works, ok, i believe!

Thank you.

[Grep]

I just upgraded from 1.4.1 -> 1.5.1 -> 1.5.2. Almost everything seemed to work fine. Just one little annoying problem. Images on/off.gif are gone at the index-page. Only empty space is left and there's now harder to know if there's new messages or not. Ironically markasread.gif is still visible, maybe just to laugh at me.  . I viewed the code in browser, there's just no lines to show on/off.gif, so they are not missing but seems to be missing from code totally.

Upgrade went ok, upgrade.php said on first page, though:

Code Select Expand


Error: MySQL said:

Duplicate column name 'ID_LAST_TOPIC'
Error: MySQL said:

Can't DROP 'membername'. Check that column/key exists


Second page was errorfree. Any ideas how to fix this?

-Grep-

[el-brujo]

One thing more, the bug was been published at SecurityFocus.com

http://www.securityfocus.com/archive/1/320997/2003-05-07/2003-05-13/0

I believe that the bug doesn't works, but anyway the bug was published, and perhaps the administrators could reply to SecurityFocus dot com.

[David]

One thing more, the bug was been published at SecurityFocus.com

http://www.securityfocus.com/archive/1/320997/2003-05-07/2003-05-13/0

I believe that the bug doesn't works, but anyway the bug was published, and perhaps the administrators could reply to SecurityFocus dot com.

Christian Land has replied and you are correct that it is not an actual security hole.  Whoever posted it did not take the time to test it.

[[Unknown]]

Grep, you forgot to upload all the files.  Notably, english.lng.

-[Unknown]

[Grep]

Grep, you forgot to upload all the files.  Notably, english.lng.

Aah.. that did the trick. Thanks.  

-Grep-

[Michele]

One thing more, the bug was been published at SecurityFocus.com

http://www.securityfocus.com/archive/1/320997/2003-05-07/2003-05-13/0

I believe that the bug doesn't works, but anyway the bug was published, and perhaps the administrators could reply to SecurityFocus dot com.

Christian Land has replied and you are correct that it is not an actual security hole.  Whoever posted it did not take the time to test it.

David, you might want to update the info on that site. They don't show the Not Vulnerable versions of YaBB SE, and I know you closed those holes in later versions. This way folks viewing that site will know the current version does not have any of the vulns in them!

Michele

[David]

The problem is with how that site is designed, you can reply and it isn't shown very well.  I will try sending them an e-mail tonight letting them know it is bogus.

[tamalyn]

My message board has dissapeared|!  It was working fine earlier, i even added a shout box, which was tested, and worked fine etc. then 3 hours later, gone.

all files are still there, my database seems ok. My other yabbse on the same hosting are fine too.

any ideas? have i been hacked?
my url is http://www.harry4ever.com/yabbse/

Thanks
Tamalyn

[fruity_baby]

Not sure if I'm using the 1.5.1 beta or not. I checked in admin and it say's "YaBB SE 1.5.1RC1". Is this beta or not?

Cheers T.

[Omar Bazavilvazo]

My message board has dissapeared|!  It was working fine earlier, i even added a shout box, which was tested, and worked fine etc. then 3 hours later, gone.

all files are still there, my database seems ok. My other yabbse on the same hosting are fine too.

any ideas? have i been hacked?
my url is http://www.harry4ever.com/yabbse/

Thanks
Tamalyn

I see your forum fine.
also, latest version is 1.5.2

[H.Samuelsson]

Language for Karma is hard coded

To be able to translate all language specific words karmaLabel, karmaApplaudLabel and karmaSmiteLabel shouldn't be in the database but should be found in the language file instead.
If you use one database for words it would be like hard code specific language in PHP files.

Suggestion for language file:
$txt[karma1] = 'Karma:';
$txt[karma2] = 'appleud';
$txt[karma3] = 'smite:';
$txt[karma3] = 'Total Karma:';

[shinsh]

Lo
Even with the latest Errors.php, I got a problem when I try to view the errors logged.

Code Select Expand

Unknown column 'le.ID_MEMBER' in 'on clause'
File: /home/shinmuge/www/mugendev/Sources/Errors.php
Line: 84


any ideas plz?

[Douglas]

Using phpMyAdmin, run a repair on all tables, then optimize them.