[xwiki-users] my XWiki instance is under serious login attack, and I think it's been hacked.
9 Dec
2012
9 Dec
'12
10:32 p.m.
I saw tomcat.log, and I was surprised by the fact that the log was filled
with
"
http://snowberry.me:8080/xwiki/login/XWiki/XWikiLogin;jsessionid=4EE31BA087…
"
And the log says my private pages had been hacked by access on
"
http://snowberry.me/xwiki/export/Main/Elisa+Slackware+Installation?format=r…
"
What the hell is going on?
I could extract private pages without logging in by accessing that URL.
9 Dec
9 Dec
10:39 p.m.
New subject: [xwiki-users] my XWiki instance is under serious login attack, and I think it's been hacked.
It turned out that I made a mistake by putting a private page in Main space
instead of Private space.
But I think I should change my admin account to prevent hacking in advance.
On Mon, Dec 10, 2012 at 6:32 AM, crocket <crockabiscuit(a)gmail.com> wrote:
I saw tomcat.log, and I was surprised by the fact
that the log was filled
with
"
http://snowberry.me:8080/xwiki/login/XWiki/XWikiLogin;jsessionid=4EE31BA087…
"
And the log says my private pages had been hacked by access on
"
http://snowberry.me/xwiki/export/Main/Elisa+Slackware+Installation?format=r…
"
What the hell is going on?
I could extract private pages without logging in by accessing that URL.
4396
days inactive
4396
days old
1 comments
1 participants
participants (1)
-
crocket