Web Site reported by Google

Discussion regarding Joomla! 1.5 security issues.
Joomla! Vulnerable Extensions: http://feeds.joomla.org/JoomlaSecurityV ... Extensions

Moderator: General Support Moderators

Forum rules
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Security Checklist
Forum Post Assistant - If you are serious about wanting help, you will use this tool to help you post.
Locked
csierra
Joomla! Fledgling
Joomla! Fledgling
Posts: 1
Joined: Thu May 11, 2017 9:19 pm

Web Site reported by Google

Post by csierra » Thu May 11, 2017 9:59 pm

Hello,

I noticed that Google reported the site because contain malicious code.

I restore a backup and checked and I did not found some change in the files.

I ran the script "fpa-en.php" in order to determine how i ca fix it and improve the current security.

Any advice is welcome


]
Problem Description :: Forum Post Assistant (v1.3.0) : 11th May 2017 wrote:Site in blacklist
Log/Error Message :: Forum Post Assistant (v1.3.0) : 11th May 2017 wrote:Google ha detectado contenido dañino en algunas páginas de tu sitio web.
Last PHP Error(s) Reported :: Forum Post Assistant (v1.3.0) : 11th May 2017 wrote:[11-May-2017 16:35:49 America/New_York] PHP Warning: mysql_num_rows() expects parameter 1 to be resource, boolean given in /home/itservso/public_html/fpa-en.php on line 1666
Forum Post Assistant (v1.3.0) : 11th May 2017 wrote:
Basic Environment :: wrote:Joomla! Instance :: Joomla! 1.5.20-Stable (senu takaa) 18-July-2010
Joomla! Configured :: Yes | Read-Only (444) | Owner: --protected-- . (uid: 1/gid: 1) | Group: --protected-- (gid: 1) | Valid For: 1.5
Configuration Options :: Offline: 1 | SEF: 1 | SEF Suffix: 1 | SEF ReWrite: 1 | .htaccess/web.config: Yes | GZip: 1 | Cache: 0 | FTP Layer: 0 | SSL: 0 | Error Reporting: -1 | Site Debug: 0 | Language Debug: 0 | Database Credentials Present: Yes

Host Configuration :: OS: Linux | OS Version: 2.6.18-502.el5.lve0.8.85 | Technology: x86_64 | Web Server: Apache/2.4.25 | Encoding: gzip, deflate | Doc Root: /home/itservso/public_html | System TMP Writable: Yes

PHP Configuration :: Version: 5.3.29 | PHP API: cgi-fcgi | Session Path Writable: Yes | Display Errors: | Error Reporting: 22519 | Log Errors To: error_log | Last Known Error: 11th May 2017 16:36:31. | Register Globals: 0 | Magic Quotes: | Safe Mode: 0 | Open Base: | Uploads: 1 | Max. Upload Size: 64M | Max. POST Size: 25M | Max. Input Time: 150 | Max. Execution Time: 600 | Memory Limit: 512M

MySQL Configuration :: Version: 5.0.96-community (Client:5.0.96) | Host: --protected-- (--protected--) | Collation: latin1_swedish_ci (Character Set: latin1) | Database Size: 1.09 MiB | #of Tables: 58
Detailed Environment :: wrote:PHP Extensions :: Core (5.3.29) | date (5.3.29) | ereg () | libxml () | openssl () | pcre () | sqlite3 (0.7-dev) | zlib (1.1) | bcmath () | bz2 () | calendar () | ctype () | curl () | dom (20031129) | filter (0.11.0) | ftp () | gd () | gettext () | hash (1.0) | iconv () | SPL (0.2) | json (1.2.1) | mbstring () | mcrypt () | mysql (1.0) | mysqli (0.1) | posix () | Reflection ($Id: 4af6c4c676864b1c0bfa693845af0688645c37cf $) | session () | standard (5.3.29) | SimpleXML (0.1) | sockets () | imap () | tokenizer (0.1) | xml () | xmlreader (0.1) | xmlwriter (0.1) | zip (1.11.0) | cgi-fcgi () | PDO (1.0.4dev) | pdo_sqlite (1.0.1) | SQLite (2.0-dev) | timezonedb (2016.10) | pdo_mysql (1.0.2) | ionCube Loader () | Zend Guard Loader () | Zend Engine (2.3.0) |
Potential Missing Extensions :: suhosin |

Switch User Environment (Experimental) :: PHP CGI: Yes | Server SU: Yes | PHP SU: Yes | Custom SU (LiteSpeed/Cloud/Grid): Yes
Potential Ownership Issues: No
Folder Permissions :: wrote:Core Folders :: images/ (755) | components/ (755) | modules/ (755) | plugins/ (755) | language/ (755) | templates/ (755) | cache/ (755) | logs/ (755) | tmp/ (755) | administrator/components/ (755) | administrator/modules/ (755) | administrator/language/ (755) | administrator/templates/ (755) |

Elevated Permissions (First 10) ::
Extensions Discovered :: wrote:Components :: SITE :: MailTo (1.5.0) | User (1.5.0) | WF_IMGMANAGER_TITLE (2.3.4.4) | WF_CHARMAP_TITLE (2.3.4.4) | WF_VISUALCHARS_TITLE (2.3.4.4) | WF_NONBREAKING_TITLE (2.3.4.4) | WF_LAYER_TITLE (2.3.4.4) | WF_PREVIEW_TITLE (2.3.4.4) | WF_ARTICLE_TITLE (2.3.4.4) | WF_MEDIA_TITLE (2.3.4.4) | WF_LISTS_TITLE (2.3.4.4) | WF_FULLSCREEN_TITLE (2.3.4.4) | WF_VISUALBLOCKS_TITLE (2.3.4.4) | WF_AUTOSAVE_TITLE (2.3.4.4) | WF_SOURCE_TITLE (2.3.4.4) | WF_KITCHENSINK_TITLE (2.3.4.4) | WF_LINK_TITLE (2.3.4.4) | WF_CLEANUP_TITLE (2.3.4.4) | WF_INLINEPOPUPS_TITLE (2.3.4.4) | WF_TEXTCASE_TITLE (2.3.4.4) | WF_CONTEXTMENU_TITLE (2.3.4.4) | WF_SEARCHREPLACE_TITLE (2.3.4.4) | WF_PRINT_TITLE (2.3.4.4) | WF_SPELLCHECKER_TITLE (2.3.4.4) | WF_XHTMLXTRAS_TITLE (2.3.4.4) | WF_ANCHOR_TITLE (2.3.4.4) | WF_DIRECTIONALITY_TITLE (2.3.4.4) | WF_BROWSER_TITLE (2.3.4.4) | WF_TABLE_TITLE (2.3.4.4) | WF_CLIPBOARD_TITLE (2.3.4.4) | WF_STYLE_TITLE (2.3.4.4) | WF_FILESYSTEM_JOOMLA_TITLE (2.3.4.4) | WF_MEDIAPLAYER_JCEPLAYER_TITLE (2.3.4.4) | WF_LINK_SEARCH_TITLE (2.3.4.4) | WF_AGGREGATOR_[youtube]_TITLE (2.3.4.4) | WF_AGGREGATOR_GOOGLEMAPS_TITLE (2.3.4.4) | WF_AGGREGATOR_VINE_TITLE (2.3.4.4) | WF_AGGREGATOR_VIMEO_TITLE (2.3.4.4) | WF_LINKS_JOOMLALINKS_TITLE (2.3.4.4) | K2 Links for JCE Link (2.2) | WF_POPUPS_JCEMEDIABOX_TITLE (2.3.4.4) | WF_POPUPS_WINDOW_TITLE (2.3.4.4) | Wrapper (1.5.0) |
Components :: ADMIN :: swMenuFree (5.2) | Search (1.5.0) | Language Manager (1.5.0) | Newsfeeds (1.5.0) | Akeeba (3.4.0) | Media Manager (1.5.0) | SeoBoss (1.4r30) | Joom!Fish (2.0.4) | Control Panel (1.5.0) | Frontpage (1.5.0) | Cache Manager (1.5.0) | Installation Manager (1.5.0) | Module Manager (1.5.0) | Plugin Manager (1.5.0) | Banners (1.5.0) | Weblinks (1.5.0) | Translations Manager (1.5.2) | Mass Mail (1.5.0) | Polls (1.5.0) | Menus Manager (1.5.0) | JCE (2.3.4.4) | Unknown (-) | JCE (2.3.4.4) | Content Page (1.5.0) | Messaging (1.5.0) | SEO Boss Installation Bundle (1.4r30) | Template Manager (1.5.0) | Contact Items (1.0.0) | User Manager (1.5.0) | Configuration Manager (1.5.0) | Trash (1.0.0) |

Modules :: SITE :: Latest News (1.5.0) | Login (1.5.0) | Poll (1.5.0) | Related Items (1.0.0) | Wrapper (1.0.0) | Random Image (1.5.0) | Breadcrumbs (1.5.0) | Menu (1.5.0) | swMenuFree (5.2) | JoomFish-Language Selection (2.0.4) | Custom HTML (1.5.0) | Statistics (1.5.0) | Sections (1.5.0) | Banner (1.5.0) | Archived Content (1.5.0) | Syndicate (1.5.0) | Feed Display (1.5.0) | Who\'s Online (1.0.0) | Footer (1.5.0) | Most Read Content (1.5.0) | Search (1.0.0) | Newsflash (1.5.0) |
Modules :: ADMIN :: JCE File Browser (2.3.4.4) | Login Form (1.0.0) | Online Users (1.0.0) | Admin Menu (1.0.0) | Quick Icons (1.0.0) | Popular Items (1.0.0) | Toolbar (1.0.0) | User Status (1.5.0) | Direct Translation (2.0.4) | Title (1.0.0) | Custom HTML (1.5.0) | Items Stats (1.0.0) | Latest News (1.0.0) | Akeeba Backup Notification Mod (3.4.0) | Logged in Users (1.0.0) | Feed Display (1.5.0) | Admin Submenu (1.0.0) | Unread Items (1.0.0) | Footer (1.0.0) |

Plugins :: SITE :: Joomfish - Missing Translation (2.0.4) | Button - Image (1.0.0) | Button - Pagebreak (1.5) | Button - Readmore (1.5) | User - Joomla! (1.5) | User - Example (1.0) | Search - Joomfish Content (2.0.4) | Search - Joomfish Sections (2.0.4) | Search - Weblinks (1.5) | Search - Joomfish Newsfeeds (2.0.4) | Search - Joomfish Contacts (2.0.4) | Search - Joomfish Weblinks (2.0.4) | Search - Sections (1.5) | Search - Content (1.5) | Search - Joomfish Categories (2.0.4) | Search - Categories (1.5) | Search - Contacts (1.5) | Search - Newsfeeds (1.5) | XML-RPC - Joomla API (1.0) | XML-RPC - Blogger API (1.0) | Authentication - Joomla (1.5) | Authentication - Example (1.5) | Authentication - LDAP (1.5) | Authentication - GMail (1.5) | Authentication - OpenID (1.5) | Content - Vote (1.5) | Content - Custom Page Title (1.1) | Joomfish Alternative Language (2.0.4) | Content - Page Navigation (1.5) | Content - Example (1.0) | Content - Pagebreak (1.5) | Content - Email Cloaking (1.5) | Content - Enclose Article Titl (1.0.0) | Content - Code Highlighter (Ge (1.5) | Content - Load Modules (1.5) | Content - SeoBoss Content (1.4r30) | System - Mootools Upgrade (1.5) | Joomfish - Basic Router (2.0.4) | System - Cache (1.5) | System - Debug (1.5) | Akeeba Backup Lazy Scheduling (3.3) | Joomfish - Abstraction Layer (2.0.4) | System - SEOSimple (2.0) | System - Legacy (1.5) | System - Log (1.5) | System - Remember Me (1.5) | System - SEF (1.5) | System - osolCaptcha (1.0.6) | System - Backlinks (1.5) | System - SeoBoss Renderer (1.4r30) | Editor - JCE (2.3.4.4) | Editor - TinyMCE 3 (3.2.6) | Editor - XStandard Lite for Jo (1.0) |
Templates Discovered :: wrote:Templates :: SITE :: rhuk_milkyway (1.0.2) | JA_Purity (1.2.0) | jTemplate (1.0.3) | It Services Solutions (Version 1.0) | beez (1.0.0) |
Templates :: ADMIN :: Khepri (1.0) |
Last edited by mandville on Fri May 12, 2017 4:21 am, edited 1 time in total.
Reason: Reformatted

User avatar
hafism
Joomla! Intern
Joomla! Intern
Posts: 97
Joined: Thu May 30, 2013 7:51 am
Location: Kuala Lumpur, Malaysia
Contact:

Re: Web Site reported by Google

Post by hafism » Wed May 17, 2017 6:02 am

Try to scan your website online in VirusTotal and see the result.
Regards,
Hafiz
http://www.hafism.com | http://www.ibrah.hafism.com
Find me on Facebook and Twitter @feeziologi


Locked

Return to “Security in Joomla! 1.5”