Login | Forgot password | Register
What is OpenID?
OpenID is an Internet-wide identity system that allows you to sign in to many websites with a single account.
With OpenID, your ID becomes a URL (e.g. http://username.myopenid.com/). You can get a free OpenID for example from myopenid.com.
For more information visit the official OpenID site.
Archive
SilverStripe Forums » Archive » Hacking Attempt Targeting Silverstripe Files
Our old forums are still available as a read-only archive.
|
Page:
1
|
Go to End | |
| Author | Topic: Hacking Attempt Targeting Silverstripe Files | 428 Views |
-
Hacking Attempt Targeting Silverstripe Files
29 August 2008 at 6:16am
This morning I had what appears to be an hour-long attempt to hack in to my website using code-injection exploits (see here for details). What makes this one different from all the other attempts that I've noticed so far is that they were targeting Silverstripe files (e.g., SSViewer.php). It looks like it failed, but perhaps someone with a bit more knowledge of Silverstripe's internals could take a closer look as to whether any of these attempts could work with a poorly configured server. The full log is available here.
Basically, I'd like to know if this was a lame attempt, or if they might have found something.
Hans
-
Re: Hacking Attempt Targeting Silverstripe Files
12 September 2008 at 4:31am
Sorry for the delayed answer, and thanks for providing a detailed description+log.
You're right, it looks like somebody picked specific core Silverstripe files with variables which actually exist in those files. I would still say its a script that takes variables as GET parameters on all executable files in a software project. Perhaps for the remote chance that somebody still has "register_globals" directive turned on (which was turned off default starting from PHP 4.2).
So doesn't seem like a targeted attack, just a script trying its luck...
| 428 Views | ||
|
Page:
1
|
Go to Top |
Currently Online: joelg, _Vince
Welcome to our latest member: AlfonsoGrondo
