addressalign-toparrow-leftarrow-rightbackbellblockcalendarcameraccwchatcheckchevron-downchevron-leftchevron-rightchevron-small-downchevron-small-leftchevron-small-rightchevron-small-upchevron-upcircle-with-checkcircle-with-crosscircle-with-pluscrossdots-three-verticaleditemptyheartexporteye-with-lineeyefacebookfolderfullheartglobegmailgoogleimageimagesinstagramlinklocation-pinmagnifying-glassmailminusmoremuplabelShape 3 + Rectangle 1outlookpersonplusprice-ribbonImported LayersImported LayersImported Layersshieldstartickettrashtriangle-downtriangle-uptwitteruseryahoo

Seattle PHP User Group Message Board › timthumb.php exploit?

timthumb.php exploit?

jkobie
jkobie
Seattle, WA
Post #: 1
The websites at a company I contract to were compromised by the wordpress timthumb.php exploit. The end result was that php scripts were uploaded that allow full access to the filesystem via the web server.

I think that most of issues are now under control. I was wondering if anyone else has had the pleasure of dealing with timthump or equivalent exploits?

I would be happy to supply more information related to the exploit and resolution if anyone wants to read about it.
Powered by mvnForum

Our Sponsors

  • TUNE

    Meeting space and food

  • PluralSight

    PluralSight subscriptions for developer training

  • O'Reilly

    Disc Code: PCBW is good for 40% off print and 50% off ebooks and videos

  • JetBrains PhpStorm

    Occasional free licenses to raffle off at meetups

People in this
Meetup are also in:

Sign up

Meetup members, Log in

By clicking "Sign up" or "Sign up using Facebook", you confirm that you accept our Terms of Service & Privacy Policy