Tagged Questions
0
votes
1answer
115 views
Stopping js malware injection on our Wordpress site
This had been added to our wordpress site, specifically in the footer.php.
hxxp://pkktjuchlrv.peguards.cc/02b31ac5iq/get.js
It is malware as defined by google, i belive it is tracking code.
We have ...
-5
votes
2answers
231 views
PHP injection on 777 file [closed]
Some one has modified a PHP file, which had permissions set to 777, on my VPS server.
How can someone do that without administrative access to the server?
What information I can give you?
I know ...
3
votes
1answer
127 views
Malicious php scripts in word press theme folder?
I am running a server on Ubuntu 10.04 running a word press website, and recently a virus scan revealed that I have several malicious scripts sitting in the word press folder. In particular they are in ...
3
votes
1answer
674 views
Header opening a PDF file, can someone hack a website from there?
Can someone hack a website that uses this kind of header to open a pdf?
<?php
header("Content-type:application/pdf");
// It will be called downloaded.pdf
...
2
votes
1answer
337 views
Advice if safe from mail header injection PHP [duplicate]
Possible Duplicate:
PHP mail() Header Injection Prevention
Since I only started learning about header injection in the PHP mail() function, am uncertain if the form/code below is vulnerable ...
4
votes
4answers
727 views
Server wide javascript injection
UPDATE: The server was rooted, php.ini was replaced that cause the injection to appear. Still haven't figured out which directive is injecting the javascript.
I'm troubleshooting a hacked website ...
3
votes
2answers
3k views
Testing PHP form injection
I'm writing a very small PHP app that takes input via a form. As could be expected for a first revision, the code does no escaping or sanitisation of input:
if( $_POST["var"] != "" ) {
print ...
6
votes
2answers
505 views
GET with additional parameters leads to “code injection” in html displayed
We got a security review done of our PHP code and the security company sent this in their report:
Request
GET ...
6
votes
3answers
856 views
PHP mail() Header Injection Prevention
This site nicely explains the problem. Essentially, nearly all php mail() examples that are given are vulnerable to header injection attacks. The referenced site gives a regex sanitation solution ...
