Bug Danger

[vbluis]

Hello. My hosting provider told me from day 8, receives several error logs DBSEO.
He believes that there may be someone trying to exploit a vulnerability in dbseo.
For days get 2 or 4 errors per day of this type.

Attached log error:

Database error in  1210:

Invalid SQL:

                                        SELECT userid
                                        FROM user
                                        WHERE username REGEXP "^(&[\#\da-z]*;|[^a-z\d])*(&[\#\da-z]*;|[^a-z\d])*+L3D+(&[\#\da-z]*;|[^a-z\d])*(&[\#\da-z]*;|[^a-z\d])*$"
                                        LIMIT 1;

MySQL Error   : Got error 'repetition-operator operand invalid' from regexp
Error Number  : 1139
Request Date  : Wednesday, October 22nd 2014 @ 02:54:41 AM
Error Date    : Wednesday, October 22nd 2014 @ 02:54:41 AM
Script        : http://www.tradingunited.es/foro/tags.php?tag=depositos
Referrer      :
IP Address    : 66.249.67.15
Username      : N/A
Classname     : DBSEO_Database
MySQL Version :

 

[Fillip H.]

This is not an exploit at all, don't worry

Have you disabled your Tag Rewrite URLs?

 

[vbluis]

This is not an exploit at all, don't worry

Have you disabled your Tag Rewrite URLs?

Uff, I scare haha.
Where is the "Tag Rewrite URLs"?

 

[Fillip H.]

I believe it's under "Forum URLs" in the DBSEO CP.

 

[vbluis]

I believe it's under "Forum URLs" in the DBSEO CP.

Ok thank you. I've put:

Rewrite "Tag" URLs : No

I think this will solve the problem. Otherwise, I warn

 

[vbluis]

Error again:

Database error in DragonByte SEO 1.3.0:

Invalid SQL:

SELECT userid
FROM user
WHERE username REGEXP '^(&[\#\da-z]*;|[^a-z\d])*(&[\#\da-z]*;|[^a-z\d])*+L3D+(&[\#\da-z]*;|[^a-z\d])*(&[\#\da-z]*;|[^a-z\d])*$'
LIMIT 1;

MySQL Error : Got error 'repetition-operator operand invalid' from regexp
Error Number : 1139
Request Date : Thursday, November 6th 2014 @ 02:14:53 AM
Error Date : Thursday, November 6th 2014 @ 02:14:53 AM
Script : http://www.tradingunited.es/foro/tags.php?tag=opinion
Referrer :
IP Address : 37.59.154.24
Username : N/A
Classname : DBSEO_Database
MySQL Version :