1.0.9 with exploits?

NooZes · **Joined:** Tue Jun 13, 2006 5:55 pm **Posts:** 2

Hi.
I've been atacked last night, my website has been defaced.
They have changed the configuration.php, index.php and /administrator/index.php
I've the last version, 1.0.9., updated last week.

The message on the website was ' Redworm was here'.

On the admin page has '

Redworm Was Here

Im Maniac And Turkish HeykýR Layn!

Thanks To : ZeberuS , PowerCobrA, S0ntang0

Contract Mail : Redh3ll@Yahoo.Com.Tr

Warning: main(/includes/version.php): failed to open stream: No such file or directory in /home/aeupidh/public_html/portal/includes/joomla.php on line 71

Fatal error: main(): Failed opening required '/includes/version.php' (include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/aeupidh/public_html/portal/includes/joomla.php on line 71

'

I've changed some files and now it's all kewl...

Best regards...

Tonie · **Joined:** Thu Aug 18, 2005 7:13 am **Posts:** 13258

There are no know exploits for 1.0.9, but there is one under investigation. Without the log files, it will be impossible to track the culprit of the defacement. This is also a good list: http://forum.joomla.org/index.php/topic,54006.0.html

AMU · **Posted:** Mon Jun 19, 2006 1:58 pm

hi!

look at this!

Quote:

The vulnerability has been confirmed in version 1.0.9. Other versions may also be affected.

http://secunia.com/advisories/20746

the other link to Mambo <= 4.6rc1 sql injection Jun 17 2006 12:32PM / exploit is not the same advisory, but near the same exploit

Quote:

/*
explaination:

same of http://retrogod.altervista.org/mambo_46rc1_sql.html
with some modifications to work against Joomla
and with an always true statement, to avoid to flood admin of e-mail notifications
about submissions (they simply do not succeed but injection works aswell)
*/

bye - it´s time for joomla 1.0.10 ;-)

lg. manfred

datto510 · **Joined:** Wed Apr 26, 2006 10:48 pm **Posts:** 23

a friend had a web site hacked in this manner yesterday, very annoying >:(

Joomla! Discussion Forums

Forum rules

1.0.9 with exploits?

Quick reply

Who is online