Posted by: jpyrat
« on: 09. January 2015., 14:51:51 »Hi,
Do you need someone to securise and maintain your SPIP installation ?
Do you need someone to securise and maintain your SPIP installation ?
Members
Total Members: 14197- Latest: Levine
Stats
- Total Posts: 43431
- Total Topics: 16526
- Online today: 2936
- Online ever: 51419
- (01. January 2010., 10:27:49)
Users Online
Posted by: Samker
« on: 09. January 2015., 06:11:23 »As I see it's an old vulnerability (2009.): http://passingcuriosity.com/2009/security-and-spip/
Well, finally I could solve it.
I HAD TO MANUALLY ALTER THE DATABASE.
...
Bravo masters!
Posted by: jheysen
« on: 09. January 2015., 01:59:20 »Well, finally I could solve it.
I HAD TO MANUALLY ALTER THE DATABASE.
There was an article in the DB with the redirect code, witch I deleted manually. The hackers also dropped a redirect link in the site description (meta table), that one was trickier to spot.
Glad that some SQL-fu got me working again.
Hope this helps ;p
I HAD TO MANUALLY ALTER THE DATABASE.
There was an article in the DB with the redirect code, witch I deleted manually. The hackers also dropped a redirect link in the site description (meta table), that one was trickier to spot.
Glad that some SQL-fu got me working again.
Hope this helps ;p
Posted by: jheysen
« on: 08. January 2015., 21:59:56 »Well, I just had a website I manage defaced, it's a SPIP we use on my university to deliver material to students.
The hack was done using a SPIP vulnerability, as I have googled so far (There's even a video of how to do it), but I can't manage to restore the site.
So far I removed the defacing message but now I got an empty page. I'm looking inside the DB for where the theme is set, without luck.
Anybody knows how to restore SPIP after this kind of attack?
I'll keep googling and experimenting though :p
Regards,
J.
The hack was done using a SPIP vulnerability, as I have googled so far (There's even a video of how to do it), but I can't manage to restore the site.
So far I removed the defacing message but now I got an empty page. I'm looking inside the DB for where the theme is set, without luck.
Anybody knows how to restore SPIP after this kind of attack?
I'll keep googling and experimenting though :p
Regards,
J.