XOOPS 
Forum
Forum Index General Forums Community Support Modules Support Themes Support Development International Support Module Hack Reviews Theme Designer Talk
  1. Board index / 
  2. XOOPS Community Support forums / 
  3. Q and A 
  4.  / Is this an email header injection?
Register
1
hightyde
Is this an email header injection?

  • 2005/11/5 21:56

  • hightyde

  • Just popping in

  • Posts: 86

  • Since: 2003/7/11


Just received this from our Contact module. We are running XOOPS 2.0.9.2.

Quote:
a
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Subject: you are it s few of the likes
bcc: battsl1005@aol.com

a1897a0d11bc7efb4c6910ab5b7da128
.


Should I be concerned about this?
2
m0nty
Re: Is this an email header injection?

  • 2005/11/5 22:11

  • m0nty

  • XOOPS is my life!

  • Posts: 3337

  • Since: 2003/10/24


it looks suspicious.

i would recommend upgrading to XOOPS 2.0.13.2 as it fixes quite a few security issues.

i also recommend installing the XOOPS protector module.

i would recommend also once upgraded to have all webmasters or anyone with admin privileges to change their passwords aswell..

Login

Register now!  |  Lost Password?

Search

Advanced Search

Recent Posts

Donat-O-Meter

Stats
Goal: $15.00
Due Date: Jul 31
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $15.00
Make donations with PayPal!

Latest GitHub Commits