Advanced search  


cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.

Pages: [1]   Go Down

Author Topic: Spam Message  (Read 8235 times)

0 Members and 1 Guest are viewing this topic.


  • Coppermine newbie
  • Offline Offline
  • Posts: 9
Spam Message
« on: September 26, 2006, 04:17:10 pm »

My site was bombered with messages and generate huge number of spam message. Below is the message from my host, need someone to help how to solve the problems. Thanks a lot.

One of the scripts on domain was compromised and used to
generate huge number of spam messages and to run network scans. This
activity was immediately detected and stopped. To stop this form
happening we had to disable any access to the
/home/uglycars/public_html/albums/userpics directory. Please urgently check software that is responsible
for content located in the /home/uglycars/public_html/albums/userpics
directory and update to the latest available version to make sure that
any current security holes are resolved. Do _NOT_ re-enable access to
the /home/uglycars/public_html/albums/userpics directory until you're
absolutely sure that security hole was closed.
After closing the security hole make sure to remove content of the
following directories (might be others but these were used to send spam
emails and run scans):


The attack was launched from the IP, below please find
complete access log (except requests for .gif files) registered today
from this IP. Apparently your scrpts allowed to upload and execute custom
php scripts - - [25/Sep/2006:20:01:40 -0400] "GET /favicon.ico
HTTP/1.0" 200 894 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" - - [25/Sep/2006:20:01:40 -0400] "GET
/themes/eyeball/style.css HTTP/1.0" 200 11276
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" - - [25/Sep/2006:20:01:40 -0400] "GET /scripts.js
HTTP/1.0" 200 2715
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
« Last Edit: September 26, 2006, 04:30:01 pm by puretalk »


  • Guest
Re: Spam Message
« Reply #1 on: September 26, 2006, 04:51:15 pm »

You are using 1.3.4. Update !

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47843
  • aka "GauGau"
Re: Spam Message
« Reply #2 on: October 01, 2006, 09:53:16 am »

As suggested various times, this is what you need to do (mandatory):
- Update (cpg1.3.x support has run out)

Using cpg1.4.x, this is what you might want to do:
- disable anonymous comments
- use the captcha mod
- use the akismet mod.
Pages: [1]   Go Up

Page created in 0.021 seconds with 19 queries.