WordPress.org

Ready to get started?Download WordPress

Forums

WPtouch Mobile Plugin
wptouch/themes/default/themes.php dirty hack spam redirector and security hole (4 posts)

  1. Mike Castro Demaria
    Member
    Posted 1 year ago #

    Hello,

    I see a security hole who permit to write to wptouch/themes/default/themes.php. See the code who is used to spam redirector : http://pastebin.com/XL5j4fUZ

    i don't know how the nasty cracker hack the file, but I'm sure ther is lot of WP self hosted who have the same dirty hack. In my case 1200 spam was send last week using this from 481 distinct IP (certainly proxies).

    Please check themes.php in log and use php mail.log to see if you have the same problem.

    I hope this help,
    Mike

    http://wordpress.org/plugins/wptouch/

  2. BraveNewCode Inc.
    Member
    Plugin Author

    Posted 12 months ago #

    Hi Mike,

    WPtouch does not ship with a themes.php file. What version of WPtouch and WordPress were you running?

  3. Mike Castro Demaria
    Member
    Posted 12 months ago #

    Hi,

    WPtouch is 1.9.42 and the latest WP. See following the list of file. I can send you a full archive if you like. Just give me an email.

    wptouch/
    wptouch/screenshot-6.jpg
    wptouch/screenshot-2.jpg
    wptouch/screenshot-1.jpg
    wptouch/js/
    wptouch/js/admin_1.9.js
    wptouch/js/ajax_upload.js
    wptouch/js/colorpicker_1.4.js
    wptouch/js/fancybox_1.2.5.js
    wptouch/lang/
    wptouch/lang/fr_FR.mo
    wptouch/lang/es_ES.mo
    wptouch/lang/tr_TR.mo
    wptouch/lang/de_DE.mo
    wptouch/lang/eu_EU.mo
    wptouch/lang/src/
    wptouch/lang/src/es_ES.po
    wptouch/lang/src/tr_TR.po
    wptouch/lang/src/fr_FR.po
    wptouch/lang/src/de_DE.po
    wptouch/lang/src/gl_ES.po
    wptouch/lang/src/ja_JP.po
    wptouch/lang/src/wptouch.pot
    wptouch/lang/src/eu_EU.po
    wptouch/lang/src/it_IT.po
    wptouch/lang/gl_ES.mo
    wptouch/lang/it_IT.mo
    wptouch/lang/ja_JP.mo
    wptouch/html/
    wptouch/html/ads-stats-area.php
    wptouch/html/head-area.php
    wptouch/html/plugin-compat-area.php
    wptouch/html/page-area.php
    wptouch/html/push-area.php
    wptouch/html/general-settings-area.php
    wptouch/html/icon-area.php
    wptouch/html/style-area.php
    wptouch/html/advanced-area.php
    wptouch/html/index.php
    wptouch/include/
    wptouch/include/adsense-new.php
    wptouch/include/plugin.php
    wptouch/include/icons.php
    wptouch/include/adsense.php
    wptouch/include/compat.php
    wptouch/include/submit.php
    wptouch/include/class.prowl.php
    wptouch/screenshot-7.jpg
    wptouch/screenshot-8.jpg
    wptouch/images/
    wptouch/images/fancybox/
    wptouch/images/fancybox/fancy_shadow_e.png
    wptouch/images/fancybox/fancy_closebox.png
    wptouch/images/fancybox/fancy_shadow_ne.png
    wptouch/images/fancybox/fancy_shadow_s.png
    wptouch/images/fancybox/fancy_shadow_w.png
    wptouch/images/fancybox/fancy_progress.png
    wptouch/images/fancybox/fancy_shadow_nw.png
    wptouch/images/fancybox/fancy_shadow_se.png
    wptouch/images/fancybox/fancy_shadow_sw.png
    wptouch/images/fancybox/fancy_shadow_n.png
    wptouch/images/wptouch-icon.jpg
    wptouch/images/bad.png
    wptouch/images/progress.gif
    wptouch/images/colorpicker/
    wptouch/images/colorpicker/colorpicker_hsb_h.png
    wptouch/images/colorpicker/slider.png
    wptouch/images/colorpicker/colorpicker_hsb_s.png
    wptouch/images/colorpicker/colorpicker_rgb_b.png
    wptouch/images/colorpicker/select.png
    wptouch/images/colorpicker/colorpicker_submit.png
    wptouch/images/colorpicker/colorpicker_hsb_b.png
    wptouch/images/colorpicker/colorpicker_indic.gif
    wptouch/images/colorpicker/colorpicker_rgb_r.png
    wptouch/images/colorpicker/colorpicker_hex.png
    wptouch/images/colorpicker/colorpicker_background.png
    wptouch/images/colorpicker/blank.gif
    wptouch/images/colorpicker/index.php
    wptouch/images/colorpicker/colorpicker_rgb_g.png
    wptouch/images/colorpicker/colorpicker_overlay.png
    wptouch/images/h3_icons/
    wptouch/images/h3_icons/general.png
    wptouch/images/h3_icons/advanced.png
    wptouch/images/h3_icons/megaphone.png
    wptouch/images/h3_icons/page.png
    wptouch/images/h3_icons/iconpool.png
    wptouch/images/h3_icons/rss.png
    wptouch/images/h3_icons/adsense.png
    wptouch/images/h3_icons/plugin.png
    wptouch/images/h3_icons/push.png
    wptouch/images/h3_icons/style.png
    wptouch/images/h3_icons/index.php
    wptouch/images/settings_small.png
    wptouch/images/wand_small.png
    wptouch/images/saved.png
    wptouch/images/default.jpg
    wptouch/images/good.png
    wptouch/images/admin-ajax-loader.gif
    wptouch/images/reset.png
    wptouch/images/sortof.png
    wptouch/images/upload.png
    wptouch/images/icon-pool/
    wptouch/images/icon-pool/ToDo.png
    wptouch/images/icon-pool/Maps.png
    wptouch/images/icon-pool/Facebook.png
    wptouch/images/icon-pool/MySpace.png
    wptouch/images/icon-pool/Safari.png
    wptouch/images/icon-pool/Delicious.png
    wptouch/images/icon-pool/Archives.png
    wptouch/images/icon-pool/WordPress.png
    wptouch/images/icon-pool/Colors.png
    wptouch/images/icon-pool/Contacts.png
    wptouch/images/icon-pool/Wikipedia.png
    wptouch/images/icon-pool/Music.png
    wptouch/images/icon-pool/Home.png
    wptouch/images/icon-pool/RSS.png
    wptouch/images/icon-pool/Photos.png
    wptouch/images/icon-pool/Notes.png
    wptouch/images/icon-pool/Camera.png
    wptouch/images/icon-pool/Finder.png
    wptouch/images/icon-pool/Flickr.png
    wptouch/images/icon-pool/Books.png
    wptouch/images/icon-pool/Apps.png
    wptouch/images/icon-pool/Podcast.png
    wptouch/images/icon-pool/iPod.png
    wptouch/images/icon-pool/Mail.png
    wptouch/images/icon-pool/Google.png
    wptouch/images/icon-pool/Calendar.png
    wptouch/images/icon-pool/YouTube.png
    wptouch/images/icon-pool/Default.png
    wptouch/images/icon-pool/Twitter.png
    wptouch/images/icon-pool/iTunes.png
    wptouch/images/icon-pool/Digg.png
    wptouch/images/icon-pool/Stocks.png
    wptouch/images/icon-pool/Clock.png
    wptouch/images/icon-pool/Videos.png
    wptouch/images/icon-pool/Admin.png
    wptouch/images/icon-pool/Squares.png
    wptouch/screenshot-3.jpg
    wptouch/screenshot-5.jpg
    wptouch/themes/
    wptouch/themes/core/
    wptouch/themes/core/core.js
    wptouch/themes/core/core-css/
    wptouch/themes/core/core-css/wptouch-switch-link.css
    wptouch/themes/core/core-css/gigpress.css
    wptouch/themes/core/core-styles.php
    wptouch/themes/core/core-images/
    wptouch/themes/core/core-images/arrow.png
    wptouch/themes/core/core-images/post-options.png
    wptouch/themes/core/core-images/thumbs/
    wptouch/themes/core/core-images/thumbs/21.jpg
    wptouch/themes/core/core-images/thumbs/3.jpg
    wptouch/themes/core/core-images/thumbs/20.jpg
    wptouch/themes/core/core-images/thumbs/19.jpg
    wptouch/themes/core/core-images/thumbs/8.jpg
    wptouch/themes/core/core-images/thumbs/12.jpg
    wptouch/themes/core/core-images/thumbs/22.jpg
    wptouch/themes/core/core-images/thumbs/24.jpg
    wptouch/themes/core/core-images/thumbs/14.jpg
    wptouch/themes/core/core-images/thumbs/7.jpg
    wptouch/themes/core/core-images/thumbs/thumb-empty.jpg
    wptouch/themes/core/core-images/thumbs/23.jpg
    wptouch/themes/core/core-images/thumbs/5.jpg
    wptouch/themes/core/core-images/thumbs/2.jpg
    wptouch/themes/core/core-images/thumbs/16.jpg
    wptouch/themes/core/core-images/thumbs/9.jpg
    wptouch/themes/core/core-images/thumbs/18.jpg
    wptouch/themes/core/core-images/thumbs/11.jpg
    wptouch/themes/core/core-images/thumbs/6.jpg
    wptouch/themes/core/core-images/thumbs/4.jpg
    wptouch/themes/core/core-images/thumbs/15.jpg
    wptouch/themes/core/core-images/thumbs/13.jpg
    wptouch/themes/core/core-images/thumbs/10.jpg
    wptouch/themes/core/core-images/thumbs/17.jpg
    wptouch/themes/core/core-images/thumbs/1.jpg
    wptouch/themes/core/core-images/head-close.png
    wptouch/themes/core/core-images/flash.jpg
    wptouch/themes/core/core-images/gigpress.png
    wptouch/themes/core/core-images/bookmarks/
    wptouch/themes/core/core-images/bookmarks/newsvine.jpg
    wptouch/themes/core/core-images/bookmarks/reddit.jpg
    wptouch/themes/core/core-images/bookmarks/delicious.jpg
    wptouch/themes/core/core-images/bookmarks/digg.jpg
    wptouch/themes/core/core-images/bookmarks/magnolia.jpg
    wptouch/themes/core/core-images/bookmarks/technorati.jpg
    wptouch/themes/core/core-images/backgrounds/
    wptouch/themes/core/core-images/backgrounds/argyle-tie.gif
    wptouch/themes/core/core-images/backgrounds/fiber.png
    wptouch/themes/core/core-images/backgrounds/pinstripes-horizontal.gif
    wptouch/themes/core/core-images/backgrounds/crossed_stripes.png
    wptouch/themes/core/core-images/backgrounds/light_noise_diagonal.png
    wptouch/themes/core/core-images/backgrounds/pinstripes-diagonal.gif
    wptouch/themes/core/core-images/backgrounds/pinstripes-classic.gif
    wptouch/themes/core/core-images/backgrounds/stitched_wool.png
    wptouch/themes/core/core-images/backgrounds/white_carbon.png
    wptouch/themes/core/core-images/backgrounds/skated-concrete.gif
    wptouch/themes/core/core-images/backgrounds/grid.gif
    wptouch/themes/core/core-images/backgrounds/low_contrast_linen.png
    wptouch/themes/core/core-images/backgrounds/random_grey.png
    wptouch/themes/core/core-images/backgrounds/white_carbon_fiber.png
    wptouch/themes/core/core-images/push-success.png
    wptouch/themes/core/core-images/menu/
    wptouch/themes/core/core-images/menu/wptouch-menu-cats.png
    wptouch/themes/core/core-images/menu/wptouch-menu-acct.png
    wptouch/themes/core/core-images/menu/wptouch-menu-tags.png
    wptouch/themes/core/core-images/menu/wptouch-menu-login.png
    wptouch/themes/core/core-images/com_arrow.png
    wptouch/themes/core/core-images/post-arrow.png
    wptouch/themes/core/core-images/off.jpg
    wptouch/themes/core/core-images/wptouch-menu-dropper.png
    wptouch/themes/core/core-images/menu-sprite.png
    wptouch/themes/core/core-images/onoff.jpg
    wptouch/themes/core/core-images/push-fail.png
    wptouch/themes/core/core-images/lazy-photo.jpg
    wptouch/themes/core/core-images/head-fade-bk.png
    wptouch/themes/core/core-images/push-icon.png
    wptouch/themes/core/core-images/on.jpg
    wptouch/themes/core/core-images/quotes.png
    wptouch/themes/core/core-images/comment-ajax-loader.gif
    wptouch/themes/core/core-images/type.png
    wptouch/themes/core/core-images/twitter-arrow.jpg
    wptouch/themes/core/core-images/thumb-corners.png
    wptouch/themes/core/core-images/gigpress-stripes.png
    wptouch/themes/core/core-images/sprite.png
    wptouch/themes/core/core-images/sticky.png
    wptouch/themes/core/core-images/blank_gravatar.jpg
    wptouch/themes/core/core-images/ajax-loader.gif
    wptouch/themes/core/core-functions.php
    wptouch/themes/core/core-header.php
    wptouch/themes/default/
    wptouch/themes/default/page.php
    wptouch/themes/default/single.php
    wptouch/themes/default/comments.php
    wptouch/themes/default/style.css
    wptouch/themes/default/themes.php
    wptouch/themes/default/header.php
    wptouch/themes/default/index.php
    wptouch/themes/default/footer.php
    wptouch/themes/default/functions.php
    wptouch/screenshot-4.jpg
    wptouch/wptouch.php
    wptouch/admin-css/
    wptouch/admin-css/wptouch-admin.css
    wptouch/admin-css/bnc-global.css
    wptouch/admin-css/bnc-compressed-global.css
    wptouch/ajax/
    wptouch/ajax/file_upload.php
    wptouch/ajax/support.php
    wptouch/ajax/news.php
    wptouch/readme.txt

  4. BraveNewCode Inc.
    Member
    Plugin Author

    Posted 11 months ago #

    Did you download that version from the WordPress plugin repository?

Topic Closed

This topic has been closed to new replies.

About this Plugin

About this Topic