Jump to content

  • You cannot start a new topic
  • You cannot reply to this topic

PHP Bulk Emailer under /skins/ Rate Topic   - - - - -

 
  • Vishal
  • Junior Member
  • Members
  • Join Date: 06-Jul 06
  • 16 posts

Posted 19 October 2006 - 07:31 PM #1

On my server for some reason PHP Bulk Emailer seems to present. I am not sure if the files came along with cs-cart.

It is present at /shop/skins/

food.php 600 chmod
head.php 600 chmod
mysql.info.php 600 chmod
nat.php 600 chmod

Any idea if the files came with cs-cart or is my server compromised.

Thank you for the help.

 
  • TonyK
  • Member
  • Members
  • Join Date: 03-Mar 06
  • 1686 posts

Posted 19 October 2006 - 07:37 PM #2

There are NO php files under /skins/

your server is comprimised.
Pimpin' skins since v1.0

 
  • Vishal
  • Junior Member
  • Members
  • Join Date: 06-Jul 06
  • 16 posts

Posted 19 October 2006 - 07:39 PM #3

Any idea if this is cuz of cs-cart or something?

 
  • TonyK
  • Member
  • Members
  • Join Date: 03-Mar 06
  • 1686 posts

Posted 19 October 2006 - 07:40 PM #4

No way to tell, except your host can investigate the log files. if its shared hosting, it could a million and one possibilities.
Pimpin' skins since v1.0

 
  • Vishal
  • Junior Member
  • Members
  • Join Date: 06-Jul 06
  • 16 posts

Posted 19 October 2006 - 07:42 PM #5

I guess we are talking at both the posts.. lets just talk here :

Its is a dedicted server.

 
  • snorocket
  • Forum Janitor
  • Members
  • Join Date: 15-Mar 06
  • 2519 posts

Posted 19 October 2006 - 07:42 PM #6

delete any php file under skins/ dir and for now I'd change all your passwords ect...looks like you've been hacked.
SNOROCKET.COM, Now Accepting PRE-ORDERS:
Customer Service (Helpdesk) Addon for CS-Cart v4.3.1
Quote and Invoicing Addon for CS-Cart v4.3.1

 
  • Vishal
  • Junior Member
  • Members
  • Join Date: 06-Jul 06
  • 16 posts

Posted 19 October 2006 - 07:44 PM #7

the db1.php seems to have uploaded some content under root folder and affected few other sites on the server. Seems like I am going to have to make the call for reformat and restart.

 
  • TonyK
  • Member
  • Members
  • Join Date: 03-Mar 06
  • 1686 posts

Posted 19 October 2006 - 08:38 PM #8

most likely.
Pimpin' skins since v1.0