Login or create new account.

By registering on joomprod.com, you will have immediate access to all our free products and to the public side of our support forum.

Enjoy our subscriptions.

Each of our subscriptions allow you to enjoy the private side of the support forum and all the update of our products for a period ranging from 3 months to 1 year.

Payment And immediate download.

After subscribing to one of our subscription, the products are immediately downloadable.

Login

Or Register
Accueil / forum / Public Forum / Main Forum / 3.1.0 under attack

Support Availability Because we must sleep sometimes

Working days: Monday to Friday.
Reply time: Depending on the complexity of your support issue it's usually between a few hours to 48 hours.

Support is only guaranteed to paid subscribers

AdsManager - End of life

It is with great regrets that we have chosen to end the developpement of Adsmanager and its other associated components.

AdsManager is born 10 years ago and, as of today, the number of new subscriptions and downloads have fallen and we cannot maintain the component anymore.

All active subscribers will be able to continue enjoying support until the end of their subscription.

The components will be free and no support will be provided anymore for the other users.

×

Notice

The forum is in read only mode.

  1. forum
  3. Public Forum
  5. Main Forum
  7. 3.1.0 under attack
× OLD Forum post could be checked here : forum.joomprod.com

3.1.0 under attack

More
11 years 3 weeks ago #16011 by acnuts
3.1.0 under attack was created by acnuts
Hi,

I've get somme problem on my site recently (3 times) now evrything ist updated and anaything,but, yesterday my hosting compagny inform me of blocked spam from my domain. this spam looks like... i

H??Subject: Setoran Target MYDOMAIN/images/com_adsmanager/ads/uploaded/myluph.php?x=f&f=myluph.php&ft=download&d=home/www/xxxxxxxxxxx/web/images/com_adsmanager/ads/uploaded by IP_FROM_MYLAYSIA
.

Body:
Boss, there was an injected target on MYDOMAIN/images/com_adsmanager/ads/uploaded/myluph.php?x=f&f=myluph.php&ft=download&d=/home/www/xxxxxxxxxxx/web/images/com_adsmanager/ads/uploaded by IP_FROM_MYLAYSIA

it'is possible that i have a vulnarability with adsmanager, probably a code from an old version? i use adsmanager since a lond time and made migration and update from early versions. Could i do anything to restrict the acces to some files?

Thank you for you help, with best regards

acnuts
The following user(s) said Thank You: adarr
More
11 years 3 weeks ago #16021 by tompap
Replied by tompap on topic 3.1.0 under attack
Strange... a bug was found 1 year ago on old verison < 2.9.13 but there was no report on 3.1.X Maybe a old file uploaded ? but the path is not so "old". so very strange.
If you have a FTP account to check the contect of your version. (please send FTP + URL by email with link to this version)
Remove all all php files in uploaded directory

Also is good to use a component like admin tools, to block any other files that index.php to be executabled.
With admin tools you can add some exception like for adsmanager
images/com_adsmanager/ads/plugins/ path (some php need to be accessible)
The following user(s) said Thank You: adarr
Moderators: perry
  1. forum
  3. Public Forum
  5. Main Forum
  7. 3.1.0 under attack
Time to create page: 0.063 seconds
Powered by Kunena Forum