Menu

phpix3 exploit

2004-02-23
2004-04-12
  • Michael Miller

    Michael Miller - 2004-02-23

    I checked my computer this morning to find it was generating IRC traffic. Curious as I don't RUN IRC!

    I've discovered that the permissions needed to run the cache directory allowed a k1dd13 to install an IRC client and a php page to allow him to run arbitrary commands under the wwwrun context.

    (While this may be a php or apache configuration, I'm thinking it was related to phpix as the files were all placed under it's cache directory.)

     
    • Ben Hambleton

      Ben Hambleton - 2004-04-12

      phpshell right? i had the same issue. To prevent this I had to turn on safe-Mode in PHP. Unfortunetly this causes even more problems with phpix3. Namely you can not view the images. You can get around this by changing a setting in the phpix ini file. Unfortunetly by doing this you loose the high quality thumbnails that PHPIX3 used to provide.

       

Log in to post a comment.