[Phpwebsite-developers] phpWebSite and CVS are down

[Matthew M. <ma...@tu...>]

Greetings,

Steven noticed an strange process on our CVS server this morning. After
Kevin investigated, it was determined we had been compromised.

The culprit was a buffer overflow XSS in diff.php in Chora (version
1.1). Be warned.

While Kevin performs a security scan, phpWebSite will be down for about
an hour. CVS will be down longer while the server is recreated.

Thanks,
Matt

-- 
Matthew McNaney
Internet Systems Architect
Electronic Student Services
Appalachian State University
Phone: 828-262-6493
http://phpwebsite.appstate.edu
http://ess.appstate.edu