Hi !

I am a french user of your CMS and i want to inform you that a lot of french website have been hacked this week.

The hacker deleted the user permissions and put the default theme at the place of our theme.

This seems not be very important, buit the problem is that when you make your website working again, the hackers does his work again...

This hack has been done on different host and on diffrent versions of XOOPS ( from 2.0.5.2 to 2.0.6).

Whe haven't found the hole, but you can read more about this hacking here (in french) :http://www.xoopsfr-forum.net/modules/newbb/viewtopic.php?topic_id=6078&forum=14&post_id=30601#forumpost30601

I am sorry for my bad english, and i wish you will be able to help us.

You can contact me by mail at maxime@hurtrel.fr.st but please ad "Xoops" in the subject beacause i am use to delete english messages, because it is often SPAM...

Thank you !

this problem you got from upgrade scripts in your upgrade folder that come with XOOPS core

to be sure i am right go to your ftp and find the upgrade folder if you see it that mean there are no hackers

maybe someone run this upgrade

Ok, thank you !

This was the ral problem and we couldn't have found it whitout your help.

Thank you again !

you welcome
happy xooping