On Fri, Jan 25, 2002 at 12:40:32PM +0000, Struan Donald wrote: >frighteningly they charge for some of their scripts which is the free >message board is anything to go by is cheeky at best.
Hey, c'mon, if you don't pay for it it isn't worth anything, right? When a customer of (last-orkplace-but-one) wanted Ultimate Bulletin Board on his site, it took us less than a day to (a) get full UBB admin status and (b) get arbitrary remote command execution on the server. These are not the security problems which were fixed; they're still there. UBB's sole response was to delete the messages informing them of the problems from their own boards. Roger -- He's a globe-trotting pirate cat burglar from a doomed world. She's a mistrustful mute pearl diver in the wrong place at the wrong time. They fight crime!
