contao/test — Issue #1231: Security problem - script injection into PHP files
Author: importer
Created: 2011-11-29 07:33:48+00:00
State: open
Labels: Defect, Invalid

Some of my typolight webapps (about 5 of them) have been attacked recently. There was some HTML code injected to PHP files: index and main language files inside modules. It was an IFRAME connecting to some untrusted websites around the world.
My server admin told that it could be because of password-stealing from Total Commander FTP confguration via some Trojans or sth. But last time it happend on a local server without any FTP.
It sounds like there could be a BIG security whole inside typolight... I hope not...

--- _Originally created by jacobro on December 2nd, 2009, at 03:05pm (ID 1231)_