Can't Access FAQs Page or Login Page.. Script Injection?

Please report bugs here!

Moderators: jason102178, Florian, Thorsten, JochenS

Can't Access FAQs Page or Login Page.. Script Injection?

Postby chromausa » Wed Aug 17, 2011 4:24 pm

Hello,

I cannot access the admin login page:
http://www.chromausa.com/faqs/admin/index.php

Nor the FAQs page on our website:
http://www.chromausa.com/faqs/

I checked the code in the files & noticed the same line of code at line 453 & 606 on each page, I have attached a screenshot. I'm not quite sure how to address this outside of completely removing & re-installing phpMyFAQ. If that is what I have to do how can I retain all the FAQ entries we have? I'm guessing it has corrupted my database as well? Any help is appreciated.

Thanks in advance for your time,

JC
Attachments
Capture.JPG
script inserted into the files...
Capture.JPG (33.2 KiB) Viewed 1034 times
chromausa
 
Posts: 4
Joined: Fri Jan 21, 2011 1:08 am

Re: Can't Access FAQs Page or Login Page.. Script Injection?

Postby Thorsten » Wed Aug 17, 2011 5:54 pm

Hi,

this "hack" can't work because it breaks the PHP code.

Which version do you use?

You should backup your current installation and start a clean installation - maybe of the whole server.

bye
Thorsten
phpMyFAQ Maintainer and Lead Developer
amazon.de Wishlist
Thorsten
 
Posts: 12143
Joined: Tue Sep 25, 2001 11:14 am
Location: #phpmyfaq

Re: Can't Access FAQs Page or Login Page.. Script Injection?

Postby chromausa » Wed Aug 17, 2011 9:45 pm

Thanks for taking time to review my post...

I'm on version 2.6.14

Ok, so I guess i'll try to re-install & redo everything.

Thanks,
chromausa
 
Posts: 4
Joined: Fri Jan 21, 2011 1:08 am

Re: Can't Access FAQs Page or Login Page.. Script Injection?

Postby Thorsten » Thu Aug 18, 2011 7:19 am

Hi,

you should also check the logfiles of your webserver to see how the attack happened.

bye
Thorsten
phpMyFAQ Maintainer and Lead Developer
amazon.de Wishlist
Thorsten
 
Posts: 12143
Joined: Tue Sep 25, 2001 11:14 am
Location: #phpmyfaq


Return to Bug reports

Who is online

Users browsing this forum: No registered users and 4 guests