Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author foobar2022

    (@kubi23)

    It would be great to have more specifics on this in order to fix a potential bug. Do you have a CVE? How can you be sure that the attackers used a potential vulnerability in the plugin?

    Thread Starter Ryan Welcher

    (@welcher)

    I don’t believe that the attackers got in through the plugin, it looks like they were POSTing to cgi_bin. It may have just been luck that they chose this plugin to augment. I just wanted to let you know.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Plugin was accessed by hack’ is closed to new replies.