Re: HAXPLORER - any info?
| From: | Charles Kline | Date: | Thu, 30 Mar 2006 21:44:02 +0000 |
| Subject: | Re: HAXPLORER - any info? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-232954@lists.php.net to get a copy of this message | ||
Turned out to be a security hole in Mambo. He has fixed it. Thanks for your assistance.
- Charles
On Mar 30, 2006, at 3:33 PM, Brady Mitchell wrote:
-- RightCode, Inc. 900 Briggs Road #130 Mount Laurel, NJ 08054 P: 856.608.7908 F: 856.439.0154 E: ckline@rightcode.net-----Original Message----- Does anyone know anything about this, and if they do - have any thoughts on how it may have gotten on the server and how to secure against it in the future? Just trying to help out a friend here.Without knowing the exact setup of the server, we can't help much. Any service running on the system that allows people to access the system could be the culprit, or it could be weak passwords on the server, it could even be a piece of poorly written php code that allowed someone to get control. I would suggest that your friend make a list of the things he has running on his server and spend some time googling for security issues with those services/programs. Brady