Xendar.zip and a.php.rar by broscuta

[bluesatsuma]

Hi I have just had a new user log in broscuta they have uploaded two files to my CPG they looked a bit susspect so I tride to delete them I managed to delete the xender.zip but can seem delete the a.php.rar file. I also did a serch for xender.zip on google and found hundreds of other CPG websites had this file uploaded.

Does anybody know anything about this?

[Nibbler]

It's a known exploit for outdated versions of Coppermine. Search the board for details.

[bluesatsuma]

Hi thanks for that

I have blocked new users and removed files from the site. Will upgrade very soon