[TYPO3-english] Typo website hacked

[Dave Bui]

also, make sure you change all the password
- FTP detail
- Admin

Hope all will be fine for your site soon.



David Bruchmann wrote:
> ----- Ursprüngliche Nachricht -----
> Von:        Robin Edwards <robin83 at gmail.com>
> Gesendet:   Freitag, 19. Juni 2009 07:27:19
> An:         typo3-english at lists.netfielders.de
> CC:
> Betreff:    [TYPO3-english] Typo website hacked
>> Hi,
>>
>>  
>>
>> Our typo3 website has been hacked - the hackers have made it print the
>> following code before any of the html:
>>  
>>
>> We're running version 4.1.2 of Typo3. Our current server is running an 
>> older
>> version of PHP (I've tried to upgrade Typo to the latest version 
>> before but
>> this prevented me), but I've convinced our hosts to move us to a new 
>> server
>> where I can upgrade newer version which hopefully doesn't have this
>> vulnerability.
>>
> 
> Replace the core through your running version from 
> http://typo3.org/download/packages/ .
> 
> On Feb. 10th 2009 the downloadable versions were patched against 
> vulnerability.
> 
> Best Regards
> David