[pmwiki-users] Hacked site - OLD code.

Oliver Betz list_ob at gmx.net
Tue Jul 27 04:44:05 CDT 2010


Crisses wrote:

>pmwiki-2.2.0-beta65
>
>Hacked to death.  Thankfully not on my server.  Obviously an XSS attack,
> got into the server, altered EVERY php file added base64 code to every page.

can you provide details how someone can gain access to a server
running PmWiki with a XSS attack?

As far as I see, I can't change any PHP file with my browser running
malicious scripts.

Oliver




More information about the pmwiki-users mailing list