News Feed
Jobs Feed
Sections




News Archive
Looking for more information on how to do PHP the right way? Check out PHP: The Right Way

ReadyToBeServed.com:
Web Host May Ask Client To Cover Cost Of Hack
August 14, 2006 @ 08:03:39

According to this new article on ReadyToBeServed.com, a flaw in the PHPNuke software allowed a malicious user access to a server to cause all sorts of headaches for both the hosting company and the others hosted on that machine.

A Wellington, New Zealand, Web hosting company may seek compensation from a client that it claims is responsible for the worst hacking attack in the company's history. IServe blames lax security on their client's part for the hacking job that resulted in the defacing of hundreds of Websites.

The hack forced iServe to shut down all its FTP servers for 28 hours, while it replaced many of its customers' websites with back-ups that were made a few days before the incident.

Joy Cottle, iServe's general manager estimates the problem cost about $20,000 to repair. Clients with dedicated servers were not affected by the hack.

They report that the attack happened because of a flaw in the content management system that allowed the user to overwrite websites of other customers on the machine. They are even considering trying to recoup some of the costs from the customer that allowed it to happen. The hole was one found in the older version of PHPNuke the customer had uploaded.

Due to the incident, iServe is now considering banning cleints from running PHPNuke
0 comments voice your opinion now!
hack phpnuke security hole overwrite ban hack phpnuke security hole overwrite ban


blog comments powered by Disqus

Similar Posts

Justin Silverton's Blog: 5 reasons why oscommerce is a nightmare

SitePoint PHP Blog: Good and Bad PHP Code

WebDevRadio: Episode 108: New Ruby, Regex and my Framework Security Rant(tm)

Community News: rPath Linux Updates PHP5 Packages

php|architect: Never Use $_GET Again


Community Events











Don't see your event here?
Let us know!


introduction composer hhvm performance unittest hack component release package opinion database framework language security podcast application install overview facebook symfony2

All content copyright, 2014 PHPDeveloper.org :: info@phpdeveloper.org - Powered by the Solar PHP Framework