• slider image 58
:::
tad - XOOPS 安全問題 | 2010-06-22 | 人氣:17454

Tad uploader 1.1 版有一個漏洞,可以讓人不經過檢查就上傳程式。有心份子會利用之上傳一些木馬程式。

因此建議您儘早更新至1.2 版已針對此問題進行處理(或者就乾脆移除別用了...)

Tad uploader 1.2 版:http://www.tad0616.net/modules/tad_up ... mp;cfsn=355&cat_sn=23

有問題的檔案可以直接利用 tad_uploader 模組的界面來刪除之,其真實路徑位於 /uploads/tad_uploader/ 底下

刪除完若是不放心,Linux 主機者可下載底下小程式(感謝OLS3大師提供)來協助掃描看有無漏網之魚(順便建議把幾個快取目錄都清一清,有些惡意程式會躲在裡頭)。

http://www.tad0616.net/modules/tad_up ... amp;cfsn=356&cat_sn=0

解壓縮到任何目錄,利用 chmod +x scan_spy.sh 來賦予該程式執行權限,然後輸入「./scan_spy.sh」來執行掃描。

該程式會從主機根目錄掃起,有問題的檔案會直接秀出到畫面上(顯示權限不足或者找不到檔案者則應該不是惡意檔案)

有列出來的檔案請將之刪除(例如 help.php、info.php、xxx.phP...之類的檔名)

掃描完,會產生 spy.log 以及f.lst兩個紀錄檔,也可以開啟來看一下,裡面列的連結可以看一下,有沒有一些奇怪的連結。

此外,您也可以下載底下這個檔,將.htaccess解壓縮到uploads中,如此,uploads中的敏感檔案都將無法執行。

http://www.tad0616.net/modules/tad_up ... amp;cfsn=357&cat_sn=0

最後,建議資料庫密碼可以改的話就改一改,以策安全。

網友個人意見,不代表本站立場,對於發言內容,由發表者自負責任。
發表者
樹狀展開
 

 Just want to say Hi.

naturally like your web-site but you have to take a look at the spelling on several of your posts. Many of them are rife with spelling issues and I find it very bothersome to inform the reality then again I will surely come again again.

 

 Im happy I now registered

Pretty nice post. I just stumbled upon your weblog and wished to say that I have truly enjoyed browsing your blog posts. After all I'll be subscribing to your feed and I hope you write again very soon!

 

 I am the new girl

Having read this I thought it was very enlightening. I appreciate you spending some time and effort to put this article together. I once again find myself spending a significant amount of time both reading and leaving comments. But so what, it was still worthwhile!

 

 Im happy I finally registered

This excellent website really has all of the info I wanted about this subject and didn't know who to ask.

 

 I am the new girl

Ahaa, its fastidious dialogue regarding this paragraph at this place at this webpage, I have read all that, so at this time me also commenting at this place.

 

 I am the new girl

Wow that was strange. I just wrote an incredibly long comment but after I clicked submit my comment didn't appear. Grrrr... well I'm not writing all that over again. Anyway, just wanted to say superb blog!

 

 Just wanted to say Hi!

Nice blog right here! Also your web site lots up fast! What host are you the use of? Can I get your affiliate link to your host? I wish my site loaded up as quickly as yours lol

 

 Im glad I finally registered

It's fantastic that you are getting ideas from this piece of writing as well as from our argument made here.

 

 I am the new girl

Very rapidly this web site will be famous among all blogging and site-building viewers, due to it's fastidious articles

 

 Just wanted to say Hello!

You should take part in a contest for one of the finest sites on the web. I will highly recommend this web site!

 

 Im happy I finally registered

Heya i am for the first time here. I came across this board and I find It truly useful & it helped me out a lot. I hope to give something back and help others like you aided me.

 

 Just want to say Hi.

Very quickly this web site will be famous amid all blogging visitors, due to it's fastidious articles or reviews

 

 Im glad I finally registered

Wonderful, what a weblog it is! This blog provides useful data to us, keep it up.

 

 Im glad I now registered

I loved as much as you will receive carried out right here. The sketch is tasteful, your authored material stylish. nonetheless, you command get bought an shakiness over that you wish be delivering the following. unwell unquestionably come more formerly again since exactly the same nearly a lot often inside case you shield this increase.

 

 Just wanted to say Hello.

Great blog here! Also your site loads up very fast! What web host are you using? Can I get your affiliate link to your host? I wish my site loaded up as fast as yours lol

 

 I am the new one

Hey There. I found your blog using msn. This is a really well written article. I will make sure to bookmark it and come back to read more of your useful information. Thanks for the post. I will definitely comeback.

 

 I am the new girl

Hi there just wanted to give you a quick heads up and let you know a few of the pictures aren't loading properly. I'm not sure why but I think its a linking issue. I've tried it in two different internet browsers and both show the same outcome.

 

 I am the new girl

Hello friends, its enormous piece of writing about teachingand entirely defined, keep it up all the time.

 

 Just wanted to say Hi!

Thanks for a marvelous posting! I really enjoyed reading it, you're a great author.I will remember to bookmark your blog and will often come back later on. I want to encourage that you continue your great job, have a nice day!

 

 Im glad I finally signed up

When some one searches for his necessary thing, therefore he/she wants to be available that in detail, thus that thing is maintained over here.

 

 Just wanted to say Hello.

It is actually a great and helpful piece of information. I am happy that you just shared this helpful information with us. Please stay us informed like this. Thanks for sharing.

 

 Just wanted to say Hello!

Today, I went to the beachfront with my children. I found a sea shell and gave it to my 4 year old daughter and said "You can hear the ocean if you put this to your ear." She placed the shell to her ear and screamed. There was a hermit crab inside and it pinched her ear. She never wants to go back! LoL I know this is totally off topic but I had to tell someone!

 

 Just want to say Hello!

Do you mind if I quote a few of your articles as long as I provide credit and sources back to your site? My website is in the very same area of interest as yours and my users would certainly benefit from a lot of the information you provide here. Please let me know if this ok with you. Thanks a lot!

 

 I am the new guy

Excellent blog here! Also your website loads up fast! What web host are you using? Can I get your affiliate link to your host? I wish my web site loaded up as fast as yours lol

 

 I am the new girl

Write more, thats all I have to say. Literally, it seems as though you relied on the video to make your point. You clearly know what youre talking about, why waste your intelligence on just posting videos to your weblog when you could be giving us something informative to read?

 

 Im happy I now signed up

Wonderful site. Plenty of helpful info here. I'm sending it to several buddies ans also sharing in delicious. And obviously, thanks to your sweat!

 

 I am the new girl

These are actually impressive ideas in on the topic of blogging. You have touched some pleasant factors here. Any way keep up wrinting.

 

 I am the new one

You can definitely see your enthusiasm within the article you write. The arena hopes for even more passionate writers like you who aren't afraid to mention how they believe. At all times go after your heart.

 

 Im happy I finally signed up

I am genuinely thankful to the holder of this site who has shared this fantastic paragraph at at this place.

 

 I am the new one

I wanted to thank you for this very good read!! I certainly loved every little bit of it. I have got you saved as a favorite to check out new stuff you post…

 

 Just wanted to say Hi!

Appreciation to my father who informed me concerning this webpage, this website is truly awesome.

 

 Im glad I now signed up

Hi are using Wordpress for your blog platform? I'm new to the blog world but I'm trying to get started and set up my own. Do you need any coding knowledge to make your own blog? Any help would be really appreciated!

 

 Im happy I finally signed up

Greetings! Very helpful advice within this post! It's the little changes that make the most significant changes. Thanks a lot for sharing!

 

 Just wanted to say Hi.

Thanks in favor of sharing such a pleasant thinking, article is good, thats why i have read it completely

 

 I am the new guy

My partner and I stumbled over here from a different page and thought I may as well check things out. I like what I see so i am just following you. Look forward to looking at your web page repeatedly.

 

 Im glad I now registered

Hi to every one, it's in fact a pleasant for me to go to see this web site, it consists of valuable Information.

 

 Just wanted to say Hello!

Thanks for sharing your thoughts on 惡意程式掃描程式. Regards

 

 Just wanted to say Hello!

Hello my loved one! I want to say that this article is awesome, great written and include approximately all significant infos. I would like to look more posts like this .

 

 Im happy I now signed up

I love your blog.. very nice colors & theme. Did you make this website yourself or did you hire someone to do it for you? Plz reply as I'm looking to create my own blog and would like to know where u got this from. thanks a lot

 

 Im glad I finally registered

It's hard to come by educated people in this particular subject, but you sound like you know what you're talking about! Thanks

 

 I am the new guy

When some one searches for his essential thing, therefore he/she needs to be available that in detail, thus that thing is maintained over here.

 

 I am the new guy

I think what you posted was actually very reasonable. However, what about this? suppose you typed a catchier title? I mean, I don't want to tell you how to run your website, however suppose you added something that grabbed people's attention? I mean XOOPS 正體中文延伸計畫 - 惡意程式掃描程式 is a little boring. You could look at Yahoo's front page and note how they create news headlines to grab viewers interested. You might add a related video or a related picture or two to grab readers excited about what you've written. Just my opinion, it could bring your blog a little bit more interesting.

:::

即時留言簿


計數器

今天: 323323323
昨天: 510510510
總計: 2304171230417123041712304171230417123041712304171