Re: mambo hacked

check this out

http://www.frsirt.com/exploits/20051122.mambo452_xpl.php.php



On 11/22/05, alum <[email protected]> wrote:
>
> hi everyone,
>
> is mambo hackable?, i have installed mambo after weeks of running it,
> somebody installed a folder on my mambo directory, making a dumpsite for his
> files..
>
> can this be prevented?, i have port 80 only open on my router because of
> my webserver.
>
> i tried accessing the access_log and its empty.
>
> can this be an exploit for apache? how can i prevent this?, i just did
> follow all installation procedures in mambo, i dont know if there are
> security patches.
>
> or PHP-Nuke is better?
>
> appreciate your help :)
>
> merci beacoup.
>
> --
> ------------------
> bandwidth is a misnomer
> http://jovi.no-ip.org
> Registered Linux User #395367
> _________________________________________________________
> Philippine Linux Users' Group (PLUG) Newbie Mailing List
> [email protected] (#PLUG @ irc.free.net.ph)
> Read the Guidelines: http://linux.org.ph/lists
> Searchable Archives: http://archives.free.net.ph
>
>


--

"mailing lists is my personal knowledgebase"

_________________________________________________________
Philippine Linux Users' Group (PLUG) Newbie Mailing List
[email protected] (#PLUG @ irc.free.net.ph)
Read the Guidelines: http://linux.org.ph/lists
Searchable Archives: http://archives.free.net.ph