Vulnerability on Flashchat 4.4.0 Please upgrade!

[aramil]

Hi all!

My joomla 1.0.11 site was defaced through Flashchat 4.4.0. Looking in my log files, it seem to be a script (from a turkish IP), it only modified my index.php (hopefully), through the file aedating4CMS.php. Please be carefull. If someone have more info about this problem please le tme know.

Thanks. 

Some links:

http://www.milw0rm.com/exploits/2293
http://www.securityfocus.com/bid/19826/info

[infograf768]

FlashChat is a totally standalone application with no integration whatsoever with Joomla.
Joomla may only link to it as it may to anything on the Net.

To install any standalone script inside the Joomla folder (as advised by some for FlashCat) is fishing for problems.

Please make sure nothing else than your index.php has been cracked.

[zorro128]

I have been using older version of flashchat (I can not remember which one at the time, I have deleted it) and I have been hacked 7 days ago throught same file. Apparently hackers have used perl script located at albo.by.ru called lal.txt. In this way they have managed to input some scripts on my server once when started cause server overload so site is not accessible.

Perhapse someone of you know which files might me infected.

Just to mention I have been using mambo 4.5.4 SP3 but now I am upgrading to Joomla (clean installation).

[louisapatrice]

check out www.flashsyndrome.com/videochat.php. it might be what your looking for. good luck Louisa