Jump to content

Calendarscript Security Hole

TCH-Rick

By TCH-Rick
in Security Discussions

 Share

Recommended Posts

TCH-Rick Veteran

TCH-Rick

Posted
Posted

I just got through investigating a problem a new user had with his site being defaced. I banned the IP of the abuser but that won't stop them from using dial-up to log in if they are intent on getting in.

 

If you are running CalendarScript 3.2 from calendarscript.com or lower make sure you update it to 3.21. The earlier versions have bugs that allow users to discover your directory structure and then through the address bar upload a message that will overwrite your home page.

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Unfortunately, your content contains terms that we do not allow. Please edit your content to remove the highlighted words below.
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
 Share
Go to topic listing
×
×
  • Create New...