Crisses wrote: >pmwiki-2.2.0-beta65 > >Hacked to death. Thankfully not on my server. Obviously an XSS attack, > got into the server, altered EVERY php file added base64 code to every page.
can you provide details how someone can gain access to a server running PmWiki with a XSS attack? As far as I see, I can't change any PHP file with my browser running malicious scripts. Oliver _______________________________________________ pmwiki-users mailing list [email protected] http://www.pmichaud.com/mailman/listinfo/pmwiki-users
