I know some of you use the SMF (SimpleMachines Forum) software that is used to provide the Weather-Watch.com forum. If you do use this software make sure you upgrade to v1.1.4 ASAP. This fixes a number of security issues including at least one that is being actively exploited. The reason I know it’s being used is that just over a week ago this forum was hacked using the exploit. Fortunately little damage was done and even that was easily corrected. The logs of the hack were sent to the SMF developers who were able to use them to identify the exploit and develop the v1.1.4 patch to close this particular hole.
The patch prevents the exploit from being used, but if your server/forum has already been hacked, any tools put onto your server by the hacker will still be accessible until you remove them. If you have any suspicion that you might have been hacked, perhaps your forum is doing odd things and you haven’t modified/changed it or the server it runs on for some time, then I’d seriously advise checking for any evidence of hacking tools/rootkits/etc. I can’t offer advice on what to look for because that would depend on the MO of particular hacker who used the exploit.
