Welcome to Geeklog, Anonymous Friday, May 31 2024 @ 10:02 pm EDT

Comments for Geeklog security issues (and 1.3.7sr2 update)

Geeklog security issues (and 1.3.7sr2 update) | 43 comments | Create New Account

The following comments are owned by whomever posted them. This site is not responsible for what they say.

Geeklog security issues (and 1.3.7sr2 update)

Authored by: Dirk on Saturday, May 31 2003 @ 03:58 am EDT

I wouldn't wait with the upgrade, if I were you.

The above post seems to be a local issue with the poster's MySQL install (and I think it was solved on IRC yesterday). Nothing to do with Geeklog or the update.

To repeat: This is a really serious issue. If you know how, you can log into any unpatched site as the Admin. Surely, you don't want that?

bye, Dirk

Geeklog security issues (and 1.3.7sr2 update)

Authored by: Anonymous (Anonymous User) on Saturday, May 31 2003 @ 04:41 pm EDT

this really IS a serious issue

i run a 1.3.6. (in a subdirectory) and today someone hacked into my site (root) and deleted index.shtml and has put index.php instead.
(that's the way i found out about the exploit, when i got to here ... this reminds me ... there shuld be a mailinglist for admins of geek, where dirk (or someone with proper permission) could inform us about that kind of serrious issues ... maybe this mailing list could be part of geek instalation ... it could (minding user settings) automatically mail-out new articles in folder anouncments, or all of them, or something)

that means that any file can be removed by the hacker (or is it cracker)?

i made temporary changes to my geeklog, hope all goes well with upgrade in next day or so.

ps
anyone can search for
Powered By GeekLog
if he/she has reason(s)

Search

Resources

About

Getting started

Support

Development

Topics

User Functions

What's New

Articles last 4 weeks

Comments last 4 weeks

Pages last 4 weeks

Links last 4 weeks

Downloads last 4 weeks