Problem at phpbb.com for users

[Matooba]

phpbb users email comprimised
For those who have an account at area51.phpBB.com and phpbb.com, please take notice

As you may already be aware from the message on phpBB.com or the topic in the #phpBB channel on Freenode, we have recently been attacked via a vulnerability in an outdated PHPList installation. The initial attack was performed well before a new version of the software was released or a patch provided. It is important to stress that no vulnerabilities have been found in the phpBB software itself.

We took area51.phpBB.com down along with phpBB.com to ensure integrity and prevent further damage. While we actively work to bring phpBB.com back online, we would also like to inform you of the damage that has been done.

If the password to your phpBB.com account is used anywhere else (especially with the same username), we strongly recommend that you change it. Using the same password across multiple sites is not security wise and should not be done under any circumstance. Additionally, you should change your password on phpBB.com, when it becomes available.

The attacker gained entry through the PHPList application and was able to dump a complete backup of the emails on file. He then used the same exploit to access the phpBB.com database. Both the email list from PHPlist and a copy of the phpBB.com users table were then posted publicly.

Read Original Post Here

Sorry didn't know where to post this, but thought it decremental to the site as most admins would have an account there for phpbb help and such with code.

[Tural]

To clarify this, because when reading your post it sounded like this was a HM problem:
There is no vulnerability on Halomods, so users do not need to fret over their security here. The issue this is talking about is with an old phpBB modification that was used on the phpBB site.

[Matooba]

Changed the topic title to reflect post better. Good point Tural, sorry for inaccurately putting topic title.