Announcement

Collapse
No announcement yet.

hacked VB5.6.2

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • hacked VB5.6.2

    Hi, my site is hacked.
    I don't know where the problem might be. Can you help me?
    First file is uploaded in Aug 11 04:39.
    Click image for larger version

Name:	forum_1.png
Views:	258
Size:	28.5 KB
ID:	4445463

    from log
    HTML Code:
    80.251.215.8 - - [11/Aug/2020:07:11:31 +0200] "POST /ajax/render/widget_tabbedcontainer_tab_panel HTTP/1.1" 200 4685 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_10) AppleWebKit/600.1.25 (KHTML, like Gecko) Version/12.0 Safari/1200.1.25"
    80.251.215.8 - - [11/Aug/2020:07:11:32 +0200] "POST /ajax/render/widget_tabbedcontainer_tab_panel HTTP/1.1" 200 4571 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_10) AppleWebKit/600.1.25 (KHTML, like Gecko) Version/12.0 Safari/1200.1.25"
    80.251.215.8 - - [11/Aug/2020:07:11:33 +0200] "POST /attachments/1/0/1/LKqW.php HTTP/1.1" 200 3889 "-" "python-requests/2.22.0"
    80.251.215.8 - - [11/Aug/2020:08:07:05 +0200] "POST /ajax/render/widget_tabbedcontainer_tab_panel HTTP/1.1" 200 4486 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_10) AppleWebKit/600.1.25 (KHTML, like Gecko) Version/12.0 Safari/1200.1.25"
    80.251.215.8 - - [11/Aug/2020:08:07:08 +0200] "POST /9R1x6.php HTTP/1.1" 200 3990 "-" "python-requests/2.22.0"
    On some page are detected PHP/Agent.MK

    I found a mention of the same problem (in polish site)
    https://sekurak.pl/0-day-na-vbulleti...owolnego-kodu/

    Breed


  • #2
    Please see https://forum.vbulletin.com/node/4445227
    MARK.B | vBULLETIN SUPPORT

    TalkNewsUK - My vBulletin 5.6.4 Demo
    AdminAmmo - My Cloud Demo

    Comment


    • #3
      Installing the patch crashes the site when I go from admin panel and I turn the site back on. Opening the homepage - the forum is gone.

      How do I get paid support for you guys to come in and fix both of my forums? Nobody responds thru the online ticket system.

      Comment


      • #4
        I'm in the same boat. Opening page is gone.
        Drew
        Running vB v5.5.4 at Mets Global

        Comment


        • #5
          If you uploaded a full package of vBulletin and not just the two files in the Patch, then you need to run /core/install/upgrade.php so that your site works properly. You can only apply a patch to the specific version of vBulletin that they are released for. In this case, that is 5.6.0, 5.6.1, and 5.6.2. If you are not running one of those versions, you will need to perform a full upgrade of the site to 5.6.2 PL1 (recommended).

          Standard upgrade instructions can be found in the vb5readme.html included in the download package and in this topic here: https://forum.vbulletin.com/forum/vb...lletin-connect
          Translations provided by Google.

          Wayne Luke
          The Rabid Badger - a vBulletin Cloud demonstration site.
          vBulletin 5 API

          Comment


          • #6
            I was running vB v5.6.2.

            And I paid vB to that upgrade.

            I installed just patch files and the home screen went from not working to disappearing.

            I figured the index.php been hacked. Now I can upload the index.php file from the full install. But if vB v5.6.2 needs to be completely re-install I have yet to do one of those without screwing something up.

            And FTR, I was in a blackout for days here in lower Dutchess Co., NY from the hurricane that overwhelm Central Hudson.
            Drew
            Running vB v5.5.4 at Mets Global

            Comment

            Related Topics

            Collapse

            Working...
            X