revcms exploits

Colbat

Ninja
Apr 10, 2013
82
8
Hi
My staff accounts are getting hacked by someone and i'am struggling to find out how any clues to what I can do to prevent this??
 

Latinus

"Not everything that shines is Gold"
Jan 2, 2012
74
8
Well, RevCMS has obviously exploits, are you using
Code:
<?php
error_reporting(0);
?>
In your Config.php file?
If so.. it means that you're just hiding the MySQL exploits not deleting them..
So yeah, try DOWNGRADING your xampp to 1.7.3, :)
That could make your exploits go away ( I tried it in my ex retro )
-Isaia a.k.a Gaertan
 

Colbat

Ninja
Apr 10, 2013
82
8
Well, RevCMS has obviously exploits, are you using
Code:
<?php
error_reporting(0);
?>
In your Config.php file?
If so.. it means that you're just hiding the MySQL exploits not deleting them..
So yeah, try DOWNGRADING your xampp to 1.7.3, :)
That could make your exploits go away ( I tried it in my ex retro )
-Isaia a.k.a Gaertan
iam using iis
 

TheRealMoonman

I eat babies
Sep 30, 2014
360
74
Oi here is a SQL and XSS vulnerability scanner for your site
This is a Registered Version Of Web Cruiser Enterprise Edition

if that doesnt work here is the personal edition registered
 

Colbat

Ninja
Apr 10, 2013
82
8
Oi here is a SQL and XSS vulnerability scanner for your site
This is a Registered Version Of Web Cruiser Enterprise Edition

if that doesnt work here is the personal edition registered
o.o tyvm ill see whether I can find anything on this programme thx bro
 

Proximity

IDK?
Feb 13, 2014
673
56
Well, RevCMS has obviously exploits, are you using
Code:
<?php
error_reporting(0);
?>
In your Config.php file?
If so.. it means that you're just hiding the MySQL exploits not deleting them..
So yeah, try DOWNGRADING your xampp to 1.7.3, :)
That could make your exploits go away ( I tried it in my ex retro )
-Isaia a.k.a Gaertan

How do you knowq that he is using xampp...
 

Proximity

IDK?
Feb 13, 2014
673
56
You should not use xampp for production usuage. If your on windows take advantage of iis7


No i dont have this exploit but i would like to patch the exploit if your not running custom code besides a custom housekeeping

I tried tp ask him that dude that said So yeah, try DOWNGRADING your xampp to 1.7.3, :) how ouwld he know hes using that
 

scarface102

New Member
Aug 10, 2011
24
2
Not to sure if you guys ever found a fix for this but I've had a similar problem where a user was able to change my staff passwords.
I manage to fix this problem by doing the following:
Open up the file "class.core.php" in app and remove the following lines:

case "forgot":
$users->forgotten();
break;

and

case "forgot":
header('Location: '.$_CONFIG['hotel']['url'].'/me');
exit;
break;

Let me know if this fixes your problem and if so throw me a like ;)
 

Users who are viewing this thread

Top