Joomla! Discussion Forums

Can someone from the Joomla team pm me immediately. I'm getting hacked like crazy on several servers through the same vulnerability. My yim is dcmeagle, aim is dmaricic and msn is dcmeagle@goosemoose.com. I found the problem but I'm not sure how widespread it is. I'm running 1.0.8.

Note that this problem is created by the copperminevis component. I have not found the problem in any other components I've tested.

Have you contacted the developers of copperminevis? If this is a leak in this particular component, they are the persons that will need to look at/fix any security issues within that component.

Having recieved you PM and looking at the access logs, I would say that if there is a vunerability it lies in the copperminevis component and NOT in the Joomla! core.

You will need to contact the component developer, informing them of this possible security vulnerability in their extension.

It is definately in Copperminevis. I've contacted the author and am waiting for a response. I've identified the line that created the problem.

Sadly my own site was compromised running CoppermineVis.

This was not a Joomla core issue, but the component.

I worked with my hosting company and it seems they only got access to tmp (and uploaded some crap there).

I scanned my logs and it seems these scumbags are using google to search for:

"index.php?option=com_copperminevis"

to locate the sites and targetting that way.

I have since completely removed this component and all associated with it.