Sectorgame

Ok, so I was doing some checking over things and noticed a button on the bottom of the index page that shouldn't be there. I checked the source, and found that a script of somekind had been planted in the ROOT index file of Sectorgame. It also seemed to have spawned some folders in random locations on the FTP (looks like on any CHMOD folder). Here's what I just found.
I might understand how someone was able to access a CHMOD folder (since they are open to reading and writing from external sources) however I can't understand how someone was able to modify the Index document of the site. That concerns me. So, either this is a very clever bot that's going about, just planting a script in vulnerable areas or it's the start of a campaign against us (which wouldn't make sense but it's always a possibility).

What in the name of f###?

so, what would that have done in real terms ? Mass spamage ?

Have to wonder why they bother really. A dozen or so people making constant injokes, not exactly fertile sales ground is it ?

most likely a bot... and PHPbb has always been insecure from what Ive read.

This was on the server Tarry, not on PHPBB. The actual hosted folders on SG.

Oh dear, sounds bad...

Hunter wrote:This was on the server Tarry, not on PHPBB. The actual hosted folders on SG.

Oooh.


That's more... disconcerting. O.o

Can you do a log of IPs to see when the bot planted those files and what IP(s) were acessing the server at the same time?

O_o

Mmmm.......boobs.

Not now, Aldo...

Wild Fragaria wrote:Not now, Aldo...

Later?

Perhaps, if you're a good boy

Yay! How many?

You wouldn't...um...be willing to make the contents of certain of those folders available in Darksector...would you?

<_< >_>