Model Train Journal

URGENT WARNING: Critical phpB…
by Forum Moderator
Fri Jun 12, 2026 5:48 pm

=> viewtopic.php?f=1&p=427637#p427637

There is a notice about this on:=> https://www.phpbb.com/community/viewtopic.php?t=2672170

Lovely....

How is this possible CLUB CAR LOUNGE,
AS OF JULY 12 2025, THIS FORUM IS LOCKED.

HONDO74 wrote:How is this possible CLUB CAR LOUNGE,
AS OF JULY 12 2025, THIS FORUM IS LOCKED.

Because the Forum Moderator can override that status? But why put this info there where few will ever look at it?

For those of us that have absolutely no idea what this means...what does this mean? Yes, you may have to draw me a picture!

Big Jim wrote:For those of us that have absolutely no idea what this means...what does this mean? Yes, you may have to draw me a picture!

Totally agree...no idea what the underlying message is. My first impression is that MTJ, as currently configured, is beyond repair/update, and we might as well fold the tent.

healey36 wrote:

Big Jim wrote:For those of us that have absolutely no idea what this means...what does this mean? Yes, you may have to draw me a picture!

Totally agree...no idea what the underlying message is. My first impression is that MTJ, as currently configured, is beyond repair/update, and we might as well fold the tent.

I think it can be updated or at least that was what I read. That it might be, and could be, and will be is something altogether different. I am not optimistic; however, I am by nature pessimistic.

Thank you to the member who brought this to my attention.

It appears that the post was created by a hacker who took advantage of a newly found exploit in the forum software.

I honestly do not know that I have the ability to update the software without losing the entire database of posts/threads/photos. But the vulnerability exposed means that all accounts here can be hacked.

If I have to take the forum down, look for update(s) on the main MTJ page. If the forum does go down, it may be for an extended period of time as I anticipate not being able to devote as much time into upgrading/installing/modifying the software until August.

If there are any VERIFIABLE experts out here on upgrading this software/saving the database, reach out to me.

Lee

Thank you, Lee; now we all know.

The hacker starts out with, "You need to update your board to phpBB 3.3.17 immediately." I think the hack was a benign favor. The hacker confirmed the threat was real by posting the hack in a closed thread. I verified that the need for an upgrade was real, not a trick.
Reference: https://www.phpbb.com/community/viewtopic.php?t=2672170

I hope the upgrade works flawlessly.