Issue MySQL Injection sourcebans 1.4.10

eatm0rewaffles · **Author**

Hi,

This was actually a telnet/ddos attack.

Sarabveer · 08-10-2015 , 13:34 Re: Issue MySQL Injection sourcebans 1.4.10

Quote:

Originally Posted by eatm0rewaffles

Hi,

I'm new around here. I took over a long time TF2 community and recently had my sourcebans attacked. It appears to be a browser exploit of some kind. I am very new at this and have very limited knowledge how all of this works. I've firewalled all the suspect activity as of now. But I could really use some help/guidance in getting this fixed properly.

I really appreciate the work you guys do *I also just donated though it doesn't show it! Thanks!

I know I'm running an outdated software. I've also deleted the "fake" admin in sourcebans. I'd like some guidance on how to fix or if i should just update the client?

Lol, ur fault for using old 1.4.10.

eatm0rewaffles · *Last edited by eatm0rewaffles; 08-10-2015 at 13:37.*

Quite right.

I still need some help.

sk_groz · 08-10-2015 , 18:17 Re: Issue MySQL Injection sourcebans 1.4.10

Reading the changelog for the 1.4.11, it looks like they fixed an SQL injection issue. Whether or not it was the one that affected you, I'd definitely upgrade.

I'd also force a mass password change on all of your admins with web access.