 |
|
|
Thread Tools |
|
#1
19 Jul 2012, 02:10
|
|||
|
|||
|
is ajax.php on vB 3.6.8 causing my security hole and malicious software infections?
I've been getting infected with malicious software daily for the last week. I've hired the good guys at Total Server Solutions and they have pointed toward ajax.php being insecure.
Is there an updated version of JUST that file that I can use with vB 3.6.8 ? I cannot do a full vB upgrade due to a lot of php file edits that have been done to create some custom stuff. Are there any known security holes in ajax.php on my version of vB? (The !C99madShell v. 2.0 madnet edition! hack was put on) NEED HELP with ajax.php and what I can do to it so this doesn't happen again! No members have liked this post.
Last edited by z0diac : 19 Jul 2012 at 02:33. 
|
|
#2
19 Jul 2012, 02:34
|
||||
|
||||
|
Not out of the box. your third party addons, or old version of vBulletin may be allowing hackers access. Its also possible they got in completely unrelated to your vb site and hit your site as they were passing by.
No members have liked this post.
|
|
#3
19 Jul 2012, 03:10
|
|||
|
|||
|
Could updating just the ajax.php file to a more recent version help secure it?
No members have liked this post.
|
|
#4
19 Jul 2012, 06:11
|
||||
|
||||
|
It definitely wont be the ajax file, it's usually due to an add on poorly coded allowing access, if you have all the security patches for vb up to date for your installation then it will be from something else, do you have vbseo?
Check these too: https://www.vbulletin.com/forum/entr...Forums-(Part-1) https://www.vbulletin.com/forum/entr...Forums-(Part-2) https://www.vbulletin.com/docs/html/securing_vbulletin http://www.vbulletin.org/forum/showthread.php?t=193930
__________________
Kind regards, Simon Microsoft Office Help My Mods: Prevent Number Only Registrations, Ban Spiders by User Agent, WhoIsIp Info from any post, Insert Objects/ads anywhere using php, Floating Notice Box in Forumhome, Ban IP's Easily No members have liked this post.
Last edited by Simon Lloyd : 19 Jul 2012 at 06:32.
|
|
#5
19 Jul 2012, 15:47
|
||||
|
||||
|
Originally Posted by Simon Lloyd
Yes I have VBSEO although I cant' even remember what it does.
It was definitely the ajax.php file in 3.6.8 - the guys at Total Server Solutions tried a test of the exploit on it and it worked. They put on a vb 4.x ajax.php file and tried the exploit, and it didn't work. Exploit in 3.6.8 ajax.php (example):
No members have liked this post.
|
||||
|
#6
19 Jul 2012, 16:22
|
||||
|
||||
|
The xploit may well have worked on taht php file but unless your vbseo is patched up to date thats almost certainly where it was injected, there's been many threads on it, go to vbseo and check your version against the latest, they have a tool you can download to check.
__________________
Kind regards, Simon Microsoft Office Help My Mods: Prevent Number Only Registrations, Ban Spiders by User Agent, WhoIsIp Info from any post, Insert Objects/ads anywhere using php, Floating Notice Box in Forumhome, Ban IP's Easily No members have liked this post.
|
|
#7
19 Jul 2012, 16:32
|
||||
|
||||
|
I think you might want to check your plugins and see if you have any that use hook ajax_start or ajax_complete - the ajax.php file itself doesn't use the global parameter so something else must have been processing the command (I suppose it could have to do with vbseo - I don't know how that exploit worked).
Edit: BTW, here's an older thread discussing the issue: www.vbulletin.org/forum/showthread.php?t=202532 ...and if what was said in that thread is true, ajax.php isn't the original problem, it's just where a "back door" was added.
__________________
Please don't PM me - post your questions in the appropriate forum.
Please don't PM me to ask me to read your thread. No members have liked this post.
Last edited by kh99 : 19 Jul 2012 at 16:39.
|
|
«
Previous Thread
|
Next Thread
»
| Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) |
| Thread Tools | |
|
|
| New To Site? | Need Help? |
All times are GMT. The time now is 16:57.