Support » Plugin: WPtouch Mobile Plugin » wptouch/themes/default/themes.php dirty hack spam redirector and security hole

  • Hello,

    I see a security hole who permit to write to wptouch/themes/default/themes.php. See the code who is used to spam redirector : http://pastebin.com/XL5j4fUZ

    i don’t know how the nasty cracker hack the file, but I’m sure ther is lot of WP self hosted who have the same dirty hack. In my case 1200 spam was send last week using this from 481 distinct IP (certainly proxies).

    Please check themes.php in log and use php mail.log to see if you have the same problem.

    I hope this help,
    Mike

    http://wordpress.org/plugins/wptouch/

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author BraveNewCode Inc.

    (@bravenewcode)

    Hi Mike,

    WPtouch does not ship with a themes.php file. What version of WPtouch and WordPress were you running?

    Hi,

    WPtouch is 1.9.42 and the latest WP. See following the list of file. I can send you a full archive if you like. Just give me an email.

    wptouch/
    wptouch/screenshot-6.jpg
    wptouch/screenshot-2.jpg
    wptouch/screenshot-1.jpg
    wptouch/js/
    wptouch/js/admin_1.9.js
    wptouch/js/ajax_upload.js
    wptouch/js/colorpicker_1.4.js
    wptouch/js/fancybox_1.2.5.js
    wptouch/lang/
    wptouch/lang/fr_FR.mo
    wptouch/lang/es_ES.mo
    wptouch/lang/tr_TR.mo
    wptouch/lang/de_DE.mo
    wptouch/lang/eu_EU.mo
    wptouch/lang/src/
    wptouch/lang/src/es_ES.po
    wptouch/lang/src/tr_TR.po
    wptouch/lang/src/fr_FR.po
    wptouch/lang/src/de_DE.po
    wptouch/lang/src/gl_ES.po
    wptouch/lang/src/ja_JP.po
    wptouch/lang/src/wptouch.pot
    wptouch/lang/src/eu_EU.po
    wptouch/lang/src/it_IT.po
    wptouch/lang/gl_ES.mo
    wptouch/lang/it_IT.mo
    wptouch/lang/ja_JP.mo
    wptouch/html/
    wptouch/html/ads-stats-area.php
    wptouch/html/head-area.php
    wptouch/html/plugin-compat-area.php
    wptouch/html/page-area.php
    wptouch/html/push-area.php
    wptouch/html/general-settings-area.php
    wptouch/html/icon-area.php
    wptouch/html/style-area.php
    wptouch/html/advanced-area.php
    wptouch/html/index.php
    wptouch/include/
    wptouch/include/adsense-new.php
    wptouch/include/plugin.php
    wptouch/include/icons.php
    wptouch/include/adsense.php
    wptouch/include/compat.php
    wptouch/include/submit.php
    wptouch/include/class.prowl.php
    wptouch/screenshot-7.jpg
    wptouch/screenshot-8.jpg
    wptouch/images/
    wptouch/images/fancybox/
    wptouch/images/fancybox/fancy_shadow_e.png
    wptouch/images/fancybox/fancy_closebox.png
    wptouch/images/fancybox/fancy_shadow_ne.png
    wptouch/images/fancybox/fancy_shadow_s.png
    wptouch/images/fancybox/fancy_shadow_w.png
    wptouch/images/fancybox/fancy_progress.png
    wptouch/images/fancybox/fancy_shadow_nw.png
    wptouch/images/fancybox/fancy_shadow_se.png
    wptouch/images/fancybox/fancy_shadow_sw.png
    wptouch/images/fancybox/fancy_shadow_n.png
    wptouch/images/wptouch-icon.jpg
    wptouch/images/bad.png
    wptouch/images/progress.gif
    wptouch/images/colorpicker/
    wptouch/images/colorpicker/colorpicker_hsb_h.png
    wptouch/images/colorpicker/slider.png
    wptouch/images/colorpicker/colorpicker_hsb_s.png
    wptouch/images/colorpicker/colorpicker_rgb_b.png
    wptouch/images/colorpicker/select.png
    wptouch/images/colorpicker/colorpicker_submit.png
    wptouch/images/colorpicker/colorpicker_hsb_b.png
    wptouch/images/colorpicker/colorpicker_indic.gif
    wptouch/images/colorpicker/colorpicker_rgb_r.png
    wptouch/images/colorpicker/colorpicker_hex.png
    wptouch/images/colorpicker/colorpicker_background.png
    wptouch/images/colorpicker/blank.gif
    wptouch/images/colorpicker/index.php
    wptouch/images/colorpicker/colorpicker_rgb_g.png
    wptouch/images/colorpicker/colorpicker_overlay.png
    wptouch/images/h3_icons/
    wptouch/images/h3_icons/general.png
    wptouch/images/h3_icons/advanced.png
    wptouch/images/h3_icons/megaphone.png
    wptouch/images/h3_icons/page.png
    wptouch/images/h3_icons/iconpool.png
    wptouch/images/h3_icons/rss.png
    wptouch/images/h3_icons/adsense.png
    wptouch/images/h3_icons/plugin.png
    wptouch/images/h3_icons/push.png
    wptouch/images/h3_icons/style.png
    wptouch/images/h3_icons/index.php
    wptouch/images/settings_small.png
    wptouch/images/wand_small.png
    wptouch/images/saved.png
    wptouch/images/default.jpg
    wptouch/images/good.png
    wptouch/images/admin-ajax-loader.gif
    wptouch/images/reset.png
    wptouch/images/sortof.png
    wptouch/images/upload.png
    wptouch/images/icon-pool/
    wptouch/images/icon-pool/ToDo.png
    wptouch/images/icon-pool/Maps.png
    wptouch/images/icon-pool/Facebook.png
    wptouch/images/icon-pool/MySpace.png
    wptouch/images/icon-pool/Safari.png
    wptouch/images/icon-pool/Delicious.png
    wptouch/images/icon-pool/Archives.png
    wptouch/images/icon-pool/WordPress.png
    wptouch/images/icon-pool/Colors.png
    wptouch/images/icon-pool/Contacts.png
    wptouch/images/icon-pool/Wikipedia.png
    wptouch/images/icon-pool/Music.png
    wptouch/images/icon-pool/Home.png
    wptouch/images/icon-pool/RSS.png
    wptouch/images/icon-pool/Photos.png
    wptouch/images/icon-pool/Notes.png
    wptouch/images/icon-pool/Camera.png
    wptouch/images/icon-pool/Finder.png
    wptouch/images/icon-pool/Flickr.png
    wptouch/images/icon-pool/Books.png
    wptouch/images/icon-pool/Apps.png
    wptouch/images/icon-pool/Podcast.png
    wptouch/images/icon-pool/iPod.png
    wptouch/images/icon-pool/Mail.png
    wptouch/images/icon-pool/Google.png
    wptouch/images/icon-pool/Calendar.png
    wptouch/images/icon-pool/YouTube.png
    wptouch/images/icon-pool/Default.png
    wptouch/images/icon-pool/Twitter.png
    wptouch/images/icon-pool/iTunes.png
    wptouch/images/icon-pool/Digg.png
    wptouch/images/icon-pool/Stocks.png
    wptouch/images/icon-pool/Clock.png
    wptouch/images/icon-pool/Videos.png
    wptouch/images/icon-pool/Admin.png
    wptouch/images/icon-pool/Squares.png
    wptouch/screenshot-3.jpg
    wptouch/screenshot-5.jpg
    wptouch/themes/
    wptouch/themes/core/
    wptouch/themes/core/core.js
    wptouch/themes/core/core-css/
    wptouch/themes/core/core-css/wptouch-switch-link.css
    wptouch/themes/core/core-css/gigpress.css
    wptouch/themes/core/core-styles.php
    wptouch/themes/core/core-images/
    wptouch/themes/core/core-images/arrow.png
    wptouch/themes/core/core-images/post-options.png
    wptouch/themes/core/core-images/thumbs/
    wptouch/themes/core/core-images/thumbs/21.jpg
    wptouch/themes/core/core-images/thumbs/3.jpg
    wptouch/themes/core/core-images/thumbs/20.jpg
    wptouch/themes/core/core-images/thumbs/19.jpg
    wptouch/themes/core/core-images/thumbs/8.jpg
    wptouch/themes/core/core-images/thumbs/12.jpg
    wptouch/themes/core/core-images/thumbs/22.jpg
    wptouch/themes/core/core-images/thumbs/24.jpg
    wptouch/themes/core/core-images/thumbs/14.jpg
    wptouch/themes/core/core-images/thumbs/7.jpg
    wptouch/themes/core/core-images/thumbs/thumb-empty.jpg
    wptouch/themes/core/core-images/thumbs/23.jpg
    wptouch/themes/core/core-images/thumbs/5.jpg
    wptouch/themes/core/core-images/thumbs/2.jpg
    wptouch/themes/core/core-images/thumbs/16.jpg
    wptouch/themes/core/core-images/thumbs/9.jpg
    wptouch/themes/core/core-images/thumbs/18.jpg
    wptouch/themes/core/core-images/thumbs/11.jpg
    wptouch/themes/core/core-images/thumbs/6.jpg
    wptouch/themes/core/core-images/thumbs/4.jpg
    wptouch/themes/core/core-images/thumbs/15.jpg
    wptouch/themes/core/core-images/thumbs/13.jpg
    wptouch/themes/core/core-images/thumbs/10.jpg
    wptouch/themes/core/core-images/thumbs/17.jpg
    wptouch/themes/core/core-images/thumbs/1.jpg
    wptouch/themes/core/core-images/head-close.png
    wptouch/themes/core/core-images/flash.jpg
    wptouch/themes/core/core-images/gigpress.png
    wptouch/themes/core/core-images/bookmarks/
    wptouch/themes/core/core-images/bookmarks/newsvine.jpg
    wptouch/themes/core/core-images/bookmarks/reddit.jpg
    wptouch/themes/core/core-images/bookmarks/delicious.jpg
    wptouch/themes/core/core-images/bookmarks/digg.jpg
    wptouch/themes/core/core-images/bookmarks/magnolia.jpg
    wptouch/themes/core/core-images/bookmarks/technorati.jpg
    wptouch/themes/core/core-images/backgrounds/
    wptouch/themes/core/core-images/backgrounds/argyle-tie.gif
    wptouch/themes/core/core-images/backgrounds/fiber.png
    wptouch/themes/core/core-images/backgrounds/pinstripes-horizontal.gif
    wptouch/themes/core/core-images/backgrounds/crossed_stripes.png
    wptouch/themes/core/core-images/backgrounds/light_noise_diagonal.png
    wptouch/themes/core/core-images/backgrounds/pinstripes-diagonal.gif
    wptouch/themes/core/core-images/backgrounds/pinstripes-classic.gif
    wptouch/themes/core/core-images/backgrounds/stitched_wool.png
    wptouch/themes/core/core-images/backgrounds/white_carbon.png
    wptouch/themes/core/core-images/backgrounds/skated-concrete.gif
    wptouch/themes/core/core-images/backgrounds/grid.gif
    wptouch/themes/core/core-images/backgrounds/low_contrast_linen.png
    wptouch/themes/core/core-images/backgrounds/random_grey.png
    wptouch/themes/core/core-images/backgrounds/white_carbon_fiber.png
    wptouch/themes/core/core-images/push-success.png
    wptouch/themes/core/core-images/menu/
    wptouch/themes/core/core-images/menu/wptouch-menu-cats.png
    wptouch/themes/core/core-images/menu/wptouch-menu-acct.png
    wptouch/themes/core/core-images/menu/wptouch-menu-tags.png
    wptouch/themes/core/core-images/menu/wptouch-menu-login.png
    wptouch/themes/core/core-images/com_arrow.png
    wptouch/themes/core/core-images/post-arrow.png
    wptouch/themes/core/core-images/off.jpg
    wptouch/themes/core/core-images/wptouch-menu-dropper.png
    wptouch/themes/core/core-images/menu-sprite.png
    wptouch/themes/core/core-images/onoff.jpg
    wptouch/themes/core/core-images/push-fail.png
    wptouch/themes/core/core-images/lazy-photo.jpg
    wptouch/themes/core/core-images/head-fade-bk.png
    wptouch/themes/core/core-images/push-icon.png
    wptouch/themes/core/core-images/on.jpg
    wptouch/themes/core/core-images/quotes.png
    wptouch/themes/core/core-images/comment-ajax-loader.gif
    wptouch/themes/core/core-images/type.png
    wptouch/themes/core/core-images/twitter-arrow.jpg
    wptouch/themes/core/core-images/thumb-corners.png
    wptouch/themes/core/core-images/gigpress-stripes.png
    wptouch/themes/core/core-images/sprite.png
    wptouch/themes/core/core-images/sticky.png
    wptouch/themes/core/core-images/blank_gravatar.jpg
    wptouch/themes/core/core-images/ajax-loader.gif
    wptouch/themes/core/core-functions.php
    wptouch/themes/core/core-header.php
    wptouch/themes/default/
    wptouch/themes/default/page.php
    wptouch/themes/default/single.php
    wptouch/themes/default/comments.php
    wptouch/themes/default/style.css
    wptouch/themes/default/themes.php
    wptouch/themes/default/header.php
    wptouch/themes/default/index.php
    wptouch/themes/default/footer.php
    wptouch/themes/default/functions.php
    wptouch/screenshot-4.jpg
    wptouch/wptouch.php
    wptouch/admin-css/
    wptouch/admin-css/wptouch-admin.css
    wptouch/admin-css/bnc-global.css
    wptouch/admin-css/bnc-compressed-global.css
    wptouch/ajax/
    wptouch/ajax/file_upload.php
    wptouch/ajax/support.php
    wptouch/ajax/news.php
    wptouch/readme.txt

    Plugin Author BraveNewCode Inc.

    (@bravenewcode)

    Did you download that version from the WordPress plugin repository?

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘wptouch/themes/default/themes.php dirty hack spam redirector and security hole’ is closed to new replies.