I'VE BEEN HACKED!!!!

General project discussion. NOT for help questions.
Post Reply
newagekat
Forum Members
Forum Members
Posts: 161
Joined: Mon Feb 06, 2006 6:06 pm

I'VE BEEN HACKED!!!!

Post by newagekat »

Help, PLEASE

Just got a call from a client saying he's been hacked.  I checked all my clients and it seems that only clients using cmsms are affected.  what do i do?

the home page of all these sites say Hacked by Smallw0orm // OTTAMAN EMPIRE was here
newagekat
Forum Members
Forum Members
Posts: 161
Joined: Mon Feb 06, 2006 6:06 pm

Re: I'VE BEEN HACKED!!!!

Post by newagekat »

sorry, forgot to add:

some clients are on v1.4.1 spring garden
others are on v1.0.6 "Niihau"

it does not seem to matter on the version, it seems that the config.php file has been overwritten.  I do have an urgent ticket in with the host, but wondered if there was anything I could do on my end?

thank you.
User avatar
Nullig
Power Poster
Power Poster
Posts: 2380
Joined: Fri Feb 02, 2007 4:31 pm

Re: I'VE BEEN HACKED!!!!

Post by Nullig »

Sounds like the Host was hacked.

Nullig
User avatar
Dr.CSS
Moderator
Moderator
Posts: 12711
Joined: Thu Mar 09, 2006 5:32 am

Re: I'VE BEEN HACKED!!!!

Post by Dr.CSS »

Most likely the host, if you have 1.4.1 and it was hit then it isn't CMSMS because any vulnerabilities have been removed since 1.3 iirc...
Pierre M.

Re: I'VE BEEN HACKED!!!!

Post by Pierre M. »

newagekat wrote: some clients are on v1.4.1 spring garden
This is pretty safe with a professionnal hosting provider. It can be hardened following the security guide (see howtos in wiki).
newagekat wrote: others are on v1.0.6 "Niihau"
This is known unsafe and crackable for a long time.

Pierre M.
Post Reply

Return to “General Discussion”