« previous next »
Pages: [1]

Author Topic: plugin enigma installed by default and exploit in lib76.php  (Read 2503 times)

Offline jp79

  • Newbie
  • *
  • Posts: 2
plugin enigma installed by default and exploit in lib76.php
« on: February 26, 2017, 10:50:40 AM »
Hi, recently my server was hacked and used for spam sending through roundcube....  :-\ fortunately I discovered soon.
I'm still investigating, but the problem points to an old version of roundcube (0.8.x, 0.9.x) and the file:
roundcube/plugins/enigma/lib76.php
Any clues? I've been looking about this file and this plugin but i don't find this file in github, perhaps too old, the install was on november 2014

Thanks in advance!
Logged

Offline alec

  • Hero Member
  • *****
  • Posts: 1,365
Re: plugin enigma installed by default and exploit in lib76.php
« Reply #1 on: February 26, 2017, 12:28:40 PM »
There was never such a file in Roundcube. Probably has been somehow uploaded by the hacker.
Logged

Offline jp79

  • Newbie
  • *
  • Posts: 2
Re: plugin enigma installed by default and exploit in lib76.php
« Reply #2 on: March 06, 2017, 05:45:31 AM »
Indeed, suspicios php files uploaded... all solved (I hope).
Thanks for quick response!
Logged
Pages: [1]
« previous next »