eWriting Component SQL Injection

[pashao]

One of my sites was hacked this morning. I was updating it at the time and was thrown out of admin. When I attempted to log back in my password was unknown. I couldn't even email myself a new password. I thought my site was quite buttoned up so I searched around and found that there is a security risk with eWriting, http://secunia.com/advisories/29292/. This is unfortuante as I host fan fiction. I noticed in my stats that searchs had been made for ewriting (can't recall the exact search string as I got angry and deleted everythign).

Anyone running ewriting be warned.

[Sue]

I've had a similar experience. This is a very worrying development for me - I've been using eWriting for years and have hundreds of stories in it.

I don't know quite what to do. I don't have the programming skills necessary to update the code.

[tankochan]

I installed it in a couple of sites, it's working fine but I'm worrying about being hacked now. I guess it's not that complex to patch, but I also have no idea of how to do this.

I hope someone can help us, since eWriting is the only fiction/stories directory component we have.

[pashao]

I Googled my site and found my login in and password on a forum. It appears that these people hack a site then post the details like a score card or something. I hope it can be made secure as you say it's the only component we have for fiction.