• Plesk Uservoice will be deprecated by October. Moving forward, all product feature requests and improvement suggestions will be managed through our new platform Plesk Productboard.
    To continue sharing your ideas and feedback, please visit features.plesk.com

New vulnerability? (plesk 9.5.4)

Me too

Same thing to me . I had to change my plesk server toward 10.4.
I don't still find the way they hack the panel plesk account.
Take care, i just delete all infected files (.pl .cgi, disable perl and cgi, it has bee hacked one more time after a week...
 
Yes me too

Hello ;

I got the same thing , things i dont understand :

- Why PLESK create a file with (0 bytes ) with system user ( for suspended domains ) in /var/spool/cron ????

- Users have no privilege to create cron jobs, how can hackers create files with users names in /var/spool/cron ?

Thanks
 
Back
Top