Edugeek server security compromise

[RabbieBurns]

http://www.edugeek.net/forums/news/96264-linkedin-hacked-2.html#post838019

 

It was disussed in the ask the admins bit of the conf. Basicly there was a zeroday hole in the forum software that EG patched within hours but not before it was cracked by some Australian scriptkiddy who probably got the same email. He hung aroud for a bit before messing with the system. The possibility of a full breach was limited given the level of the exploitation and the limits on data transfer imposed by PHP timeouts on the server at the time meaning that it was unlikely they were able to dump the user table or anything like that.