Main page has been hacked!

[knumnuts]

Someone has hacked the main page of the forums, however the previous upgrade tricks have not solved my problem. We were running 2.3.0 as of yesterday, I have up upgraded to 2.3.6 but it did not fix my problmem. When you try to access my forums page, you see a hacked front page that says "hacked by XXXXX" where the XXX's are some language I do not know. The page shows a disturbing picture of a small child being killed. The page also shows a vbulletin error "could not find forum specified, please contact the webmaster".

Any ideas?

Ryan

[Steve Machol]

Fill out a support ticket at:

http://www.vbulletin.com/members/membersupport_contactform.php

Be sure to include the login info to your Admin CP, phpMyAdmin and FTP. Hopefully the hackers have not destroyed any of your data. If they have, then you'll need to resort a backup of the database.

[knumnuts]

Thanks, I have filled out the form. I don't think the data is missing, it looks like it is all still there. None of the associated problems with the bad calendar.php file seem to appear in this hack, I think it is something different.

[Steve Machol]

Sorry but all your data (except users) was missing and this fits exactly the profile of the 'calendar' hackers. I've worked on dozens of forums they've hacked.

[whitetigergrowl]

Question is...how are they hacking the sites?

[Zachery]

Though an exploit in OLD versions of vBulletin.