XOOPS 
Forum
Forum Index General Forums Community Support Modules Support Themes Support Development International Support Module Hack Reviews Theme Designer Talk
  1. Board index / 
  2. General XOOPS.org forums / 
  3. XOOPS.org Members Lounge 
  4.  / Php-stats Security Issue
Register
1
Olorin
Php-stats Security Issue

  • 2006/3/22 10:17

  • Olorin

  • Just popping in

  • Posts: 50

  • Since: 2003/7/5 1


Php-Stats Multiple Vulnerabilities and Security Issue

Official thread(Google's English translation)

Curerently, as of March 22th, there is no official patch for the issues.
Liberty is never being too sure you're right....
2
McDonald
Re: Php-stats Security Issue

  • 2006/3/22 10:46

  • McDonald

  • Home away from home

  • Posts: 1072

  • Since: 2005/8/15


A few weeks ago they used PHP-Stats on my website to hack it.
An extra sub-folder was added to the PHP-Stats folder and a couple of big movie files were added to the folder /xoops/class/xoopseditor/fckeditor/editor/plugins/placeholder/.1
3
McNaz
Re: Php-stats Security Issue

  • 2006/3/22 10:56

  • McNaz

  • Just can't stay away

  • Posts: 574

  • Since: 2003/4/21


Thank you for pointing this out.
4
McNaz
Re: Php-stats Security Issue - Homebrew PATCH

  • 2006/3/22 11:49

  • McNaz

  • Just can't stay away

  • Posts: 574

  • Since: 2003/4/21


I've followed the php-stats forum and made a patch.

The patch includes the modified files.

Please bear in mind:
1. That my Italian is no existent.
2. I cannot support this patch. Please visit the above forum for any questions.

My thanks again to Olorin for bringing this to our attention. Hopefully there will be an official patch soon.

Cheers.

McNaz.
5
McNaz
Re: Php-stats Security Issue - Homebrew PATCH

  • 2006/3/22 11:55

  • McNaz

  • Just can't stay away

  • Posts: 574

  • Since: 2003/4/21


Please be careful with the config.php as it contains the default password.

Please make a note of your settings there before overwriting the file as these will need to be edited back
6
McDonald
Re: Php-stats Security Issue - Version 0.1.9.1b

  • 2006/3/23 15:18

  • McDonald

  • Home away from home

  • Posts: 1072

  • Since: 2005/8/15


Version 0.1.9.1b can be downloaded here

Login

Register now!  |  Lost Password?

Search

Advanced Search

Recent Posts

Who's Online

265 user(s) are online (167 user(s) are browsing Support Forums)

Members: 0

Guests: 265

more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: Nov 30
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits