There seems to be an explited script on server,someone uploaded c99shell onto the server and then executed sql commands and deleted the data from my vBulletin database.
I have restored backup and deleted c99shell but unsure how to find out which script was exploited,
Also is there a rule for mod_security to stop similar scripts from beeing uploaded and executed?
I have a spammer that's abusing a Joomla php mail script on a customer's account. How do I disable it without deleting the script? Do I simply reset the permissions to something else? (And if so, to what?)
View 13 Replies View RelatedIs there a way to located out dated and already exploited scripts on my VPS? I have already cleaned out the /tmp directory but how can I scan my clients accounts to determine if they have been exploited? Or if they should update scripts that they are running.
View 2 Replies View Related