Support Forums

Hi, a friend of mines mybb forum recently got flagged by google as malicious.

It runs mybb version 1.6.4 it also has a shoutbox plugin which I think is (http://mods.mybb.com/view/shoutbox) When you try and visit the site it says that there is a possible javascript exploit. It appears to make a 1pix by 1pix sized iframe which links to another website. I think the problem is perhaps caused by someone injecting code into the shoutbox or something. Has anyone else had any problems like this or know how to fix it? Thanks for reading and I hope someone can help

The website is, WARNING CAN BE DANGEROUS

Quote:We reported on Oct 6th that there was a vulnerability in MyBB 1.6.4 and advised on how to fix it on our blog.

If you are running a 1.6.4 forum, it's urgent that you apply this fix as quickly as possible. Visit our blog for instructions.

[Security] 1.6.4 Security Vulnerability
http://community.mybb.com/thread-105780.html

Check that out first.