[pmwiki-users] hacked, again

[Jont Allen]

Hi everyone,
I want to ask if anyone has been hacked. What I found is a "shop" 
directory in two places. This was installed around Sep 28, and by dumb 
luck I
discovered this today (Oct 2).
If it can happen to me, it might happen to you.
My theory (please correct me if I'm wrong) is that someone uploaded the 
shop directory to
/var/www/wiki/uploads/shop/...
and then somehow copied it over to
/var/www-data/shop

Has anyone a similar problem?

I have no idea how they did this, but my machine had the bash bug a few 
days ago. Could this have been the problem?
I fixed the bash bug.

Jont Allen