Joomla! Discussion Forums

Hi, my web site with joomla 1.0.8 was hacked.

Operating System  Linux
Apache Version 1.3.36 (Unix)
MySQL Version 4.1.20-standard
PHP Version 4.4.2

Ok, I found that this hacker modify the "Home" menu and put a new code with a image. When I go to modify menu I redirect to the hacker home page. If any want to see go to my web page: http://www.ebavs.net

I attach the menu manager with main menu and error and modify menu.
I repair when hosting says anything.

Regards
Victor

This looks like a SQL injection attack, are you sure you are using 1.0.8?  As far as I know there are no known SQL Injection vulnerabilities in 1.0.8, though 1.0.7 and .9 both suffer from them.  Do you think you could comb through your log files and look for suspicious requests?

If you cannot remove the infected menu item through the Joomla back end, you may have to do it manually through a MySQL utility like phpMyAdmin. 

Hi,
yes I'm using a Fantastico Install for joomla provide by the Hosting on cPanel 10. This version is an upgrade from 1.0.5.

Victor