1
Olorin
Php-stats Security Issue
  • 2006/3/22 10:17

  • Olorin

  • Just popping in

  • Posts: 50

  • Since: 2003/7/5 1


Php-Stats Multiple Vulnerabilities and Security Issue

Official thread(Google's English translation)

Curerently, as of March 22th, there is no official patch for the issues.
Liberty is never being too sure you're right....

2
McDonald
Re: Php-stats Security Issue
  • 2006/3/22 10:46

  • McDonald

  • Home away from home

  • Posts: 1072

  • Since: 2005/8/15


A few weeks ago they used PHP-Stats on my website to hack it.
An extra sub-folder was added to the PHP-Stats folder and a couple of big movie files were added to the folder /xoops/class/xoopseditor/fckeditor/editor/plugins/placeholder/.1

3
McNaz
Re: Php-stats Security Issue
  • 2006/3/22 10:56

  • McNaz

  • Just can't stay away

  • Posts: 574

  • Since: 2003/4/21


Thank you for pointing this out.

4
McNaz
Re: Php-stats Security Issue - Homebrew PATCH
  • 2006/3/22 11:49

  • McNaz

  • Just can't stay away

  • Posts: 574

  • Since: 2003/4/21


I've followed the php-stats forum and made a patch.

The patch includes the modified files.

Please bear in mind:
1. That my Italian is no existent.
2. I cannot support this patch. Please visit the above forum for any questions.

My thanks again to Olorin for bringing this to our attention. Hopefully there will be an official patch soon.

Cheers.

McNaz.

5
McNaz
Re: Php-stats Security Issue - Homebrew PATCH
  • 2006/3/22 11:55

  • McNaz

  • Just can't stay away

  • Posts: 574

  • Since: 2003/4/21


Please be careful with the config.php as it contains the default password.

Please make a note of your settings there before overwriting the file as these will need to be edited back

6
McDonald
Re: Php-stats Security Issue - Version 0.1.9.1b
  • 2006/3/23 15:18

  • McDonald

  • Home away from home

  • Posts: 1072

  • Since: 2005/8/15


Version 0.1.9.1b can be downloaded here

Login

Who's Online

165 user(s) are online (85 user(s) are browsing Support Forums)


Members: 0


Guests: 165


more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: Mar 31
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits