Santy is a worm was found at December 21st, 2004. It uses a vulnerability in popular phpBB discussion forum software to spread and it uses Google search engine to find vulnerable servers.
[...]
After the search has been performed, the worm parses the resulting page and attempts to exploit a vulnerability in phpBB software. This vulnerability, known as Highlight Vulnerability, can be used to execute arbitary code on the server running vulnerable version of phpBB.
http://www.f-secure.com/v-descs/santy_a.shtml
Come siamo messi qua su Universitor? Leggo che la versione installata è la 2.0.6 che risale a più di un anno e mezzo fa...
La patch comunque è disponibile qui: http://www.phpbb.com/phpBB/viewtopic.php?t=240513
