LOL Russian hackers trying to get the PFA e-mails before election

[Dan Druff]

Database error in vBulletin 4.1.12:

Invalid SQL:

SELECT post.postid, post.threadid, post.visible, post.title, post.userid,
thread.forumid, thread.title AS thread_title, thread.postuserid, thread.visible AS thread_visible, thread.firstpostid
FROM post AS post
LEFT JOIN thread AS thread USING (threadid)
WHERE postid IN (forums);

MySQL Error : Unknown column 'forums' in 'where clause'
Error Number : 1054
Request Date : Sunday, November 6th 2016 @ 02:58:19 PM
Error Date : Sunday, November 6th 2016 @ 02:58:19 PM
Script : http://pokerfraudalert.com/forum/for...er/request.php
Referrer :
IP Address : 185.100.87.26
Username : Unregistered
Classname : vB_Database
MySQL Version :

IP address 185.100.87.26 is a Tor exit node.

I do not use the Forum Runner feature on ths site. It's an app like Tapatalk, and support for it comes built into vBulletin.

It has been found with exploits before.

This is almost surely an SQL injection attack.

Time to disable it completely.

[sonatine]

MySQL Error : Unknown column 'forums' in 'where clause'


blood went cold there.

[Gordman]

What does Druff know about Hillary??




What are you hiding Todd?!?

[Dan Druff]

Seems to be some version of this exploit: http://blog.securelayer7.net/vbullet...cve-2016-6195/

However, this guy (using two different IPs) made a number of POST requests (instead of GET) early this morning.

Oddly I am not seeing his request (the one shown above) which took place at 2:58pm EST.

[Belly Buster]

MySQL Error : Unknown column 'forums' in 'where clause'


blood went cold there.

Goes to the trouble of writing a SQL injection attack; injects SQL that will never work.

LOL Russians.

[OSA]

I just have one question.



Are my donation threads intact?