SECURITY ALERT FOR USERS OF W-P CMS AND PHPFUSION Over the last 7 days we have received 12 individual phishing complaints against customers using the content management systems PhpFusion and W-P CMS resulting in service interruption and loss of data. Although Kapersky Labs has confirmed that the downloads of Phpfusion and W-P CMS themselves are not infected, both are highly susceptible to mysql-injection attacks resulting in an easy backdoor for hackers. Additionally it was found that many 3rd party add-ons, modules and templates hosted at web-php.de and php-fusion.co.uk contain code that may make it easier for hackers to gain unauthorized control of the software and in at least one case there is a template with a known exploit hosted on the manufacturers website itself. Over 60% of PhpFusion and W-P CMS websites hosted at SoniXHost™ have been hacked within the last 14 days. Some of the more savvy website owners have removed the exploited code themselves, but most have experienced loss of data due to the recent attacks as their websites were so infected there was no way to clean the system without a complete reinstall of the software. According to onlinethreatalerts, Phpfusion and W-P CMS are on the highest list of most exploited content management systems. The developers of both content management systems have shown little interest in addressing the security issues and the non-existent support makes it impossible for our support team to pass on information to our customers. For that reason we will no longer be supporting PhpFusion and W-P CMS and have removed both from our software catalogue. This is a permanent policy change to our terms and services agreement and all customers requesting support for either cms will be instructed to contact the manufacturer. Existing Phpfusion and W-P CMS users are highly recommended to migrate to Wordpress or Joomla. Our development team is working feverishly to put together a catalogue of supported plug-ins and templates and are developing custom plug-ins for use with SoniXCast™ and SoniXTalk™ products. Best Regards, Brian Walton Chairman and CEO Walton International Business Group LLC (WIBG) 1562 First Avenue, Suite 205-1389 NY, NY 10028-4004
Posted on: Mon, 30 Sep 2013 15:44:09 +0000
Trending Topics
Recently Viewed Topics
© 2015