Exploit to upload arbitrary php file

  • rubensedanoc

    (@rubensedanoc)


    9 years, 4 months ago

    I am currently being hacked by a arbitrary file uploaded to my server. Can you fix the problem, the exploit is public in internet, please update your plugin.
    Best regards.

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Contributor photocrati

    (@photocrati)

    9 years, 4 months ago

    @rubensedanoc – Reporting this as a review item is not really the best approach.

    Please send us a Bug Report (http://www.nextgen-gallery.com/report-bug/) so we can look at this as soon as possible. Also please include in the Bug Report how you are able to definitely know that this is directly related to NextGEN Gallery.

    Thanks!

    – Cais

    Erick Danzer

    (@edanzer)

    9 years, 2 months ago

    @rubensedanoc – Just wanted to follow up on this. First, thanks for reaching out to us when you did about a possible security vulnerability. We always take that stuff seriously, and we appreciate the notice.

    I was reviewing your correspondence with our team. I think we’ve confirmed that this was resolved. As a extra note for you and others, the vulnerability report that you sent actually notes this issue was only present in 2.0.63 and less and was confirmed patched in 2.0.65 (May 2014).

    If you still see an issue, can you please follow up on our email thread. But assuming this issue is resolved, we’re wondering if you might consider bumping your one-star rating?

    Thanks again. (Erick)

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Exploit to upload arbitrary php file’ is closed to new replies.