flying_kites Posted October 31, 2006 Posted October 31, 2006 Hi We got a site hacked. Looked like an attempt to use it as a spam generator. They managed to load code and add tables to the database. Hosting is pointing to phponline and this security threat recently issued http://securityreason.com/securityalert/1721 Does anyone have a clue what this means? regards Kym
quarterdane Posted November 2, 2006 Posted November 2, 2006 Hi We got a site hacked. Looked like an attempt to use it as a spam generator. They managed to load code and add tables to the database. Hosting is pointing to phponline and this security threat recently issued http://securityreason.com/securityalert/1721 Does anyone have a clue what this means? regards Kym I am by no means an expert, but it looks like they may have a way of typing a URL into their browser that lets them access your site and open up a command shell. If that's what it does, then basically, they have a command window (like sh or like a dos box under Windows) that lets them execute commands on your server. Wait for comments from people who know more, though. I'm just taking a guess based on the keywords I see. Yours In Service Stephanie
flying_kites Posted November 15, 2006 Author Posted November 15, 2006 Hi I think you are right. This link seems to explain more http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-5253 Our version does not have the program it refers to - this seems to be a V2.1 issue but it's pretty serious.
Recommended Posts
Archived
This topic is now archived and is closed to further replies.