• Our team is looking to connect with folks who use email services provided by Plesk, or a premium service. If you'd like to be part of the discovery process and share your experiences, we invite you to complete this short screening survey. If your responses match the persona we are looking for, you'll receive a link to schedule a call at your convenience. We look forward to hearing from you!
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

Hacking using HORDE!

N

NizzyG

Guest
My hosting company just notified that my server was used for hacking other servers. It was a denial of service attack. I was asked to look into logs and investigate it.

I found out that Horde is the one used for that. if you enabled the Horde as I did and never secured the directory, etc, your server is under watch by hackers as well. Here is the link of that application can be called from.

Basically, horde allows users to run any shell commands. Horde has php shell, sql shell as well as CLI. How nice it is! go figure it out the rest by yourself.

http://www.SITE.com/horde/admin/cmdshell.php

I strongly recommend Plesk to remove the horde from their recommended list of applications.
 
Thank you for notification. I have forwarded it to developers. I will update this thread with any useful information as soon as I receive it.
 
Still under developer's investigation. They are prepare 9.5 release now, therefore not sure that investigation will be fast.
 
Could you please, specify OS, Plesk version and steps to reproduce the issue.
 
You must log in or register to reply here.

Similar threads

E
Question Horde to Roundcube migration
Replies
1
Views
529
AYamshanov
AYamshanov
LuigiMdg
Issue Server Hacked
2
Replies
28
Views
4K
LuigiMdg
LuigiMdg
E
Issue Abnormal CPU usage and Apache crash
Replies
13
Views
4K
MartinT
M
C
Question Strategic questions
Replies
9
Views
3K
mow
M
O
Question How Can I Set Up Email Notifications in Plesk to Alert Me About Issues with the "Locate My Postal Code" Tool?
Replies
0
Views
2K
OusmaneKannon
O
Back
Top