Non-Member Was Able to Post IP Logger as a Global Announcement in Our Forums

by Spirit9876 December 30th 2016, 1:17 am

Technical Details

Forum version : #phpBB3
Position : Member
Concerned browser(s) : Mozilla Firefox, Google Chrome, Internet Explorer, Opera, Safari, Other
Screenshot of problem : https://imgur.com/a/NafOM
Who the problem concerns : All members
When the problem appeared : 12/29/16 at 5:33 PM
Forum link : http://pb2genocide.forumotion.com/

Description of problem

Hi,

I'll keep this explanation brief; approximately two hours ago, a non-member posted an IP logger disguised as an application on our forums. This IP logger was connected to the topic title itself, so as soon as you clicked on the topic, your IP was logged. The real issue is, however, that this non-member was somehow able to post their topic as a global announcement. This should be impossible, as permissions have been set to ensure such a problem should not occur.

Any explanation or support on this issue would be greatly appreciated, as it does concern the safety of my members. Thank you.