Geeklog Forums

hello guys, recently.. my friend found that, there are inproper php code in file index.php ( topic section ) that allow remote command. currently, i'm using geeklog 1.3.9 final release. i will ask from my friend abt that, & hoping that, i can attach the inproper code here.. & i hope that, geeklog developer check this out.

regards,
bieffe

p/s: sorry abt my bad english ..

Please send security issues to geeklog-security@lists.geeklog.net

See our Security page for details.

bye, Dirk

For the record: It turned out to be a misinterpretation of the webserver logfiles.

Someone did actually try some sort of attack, but Geeklog caught it and displayed a friendly error message instead.

bye, Dirk