Acelle - Email Marketing Web Application v4.0.26-p87

jpond262176 · Dec 24, 2022

Did it say what the malicious code is? If people on here are found to be spreading bad code they need banning straight away to stop them spreading more.

Sometimes you can get a false positive so the code may need checking.

I have just did a check with immunufy360 and there was something in /vendor/louis/log-view/resources/views/filemanager/index.blade.php that give root access.

My immunfy360 cleaned this file up. Check is needed.

abhishek.mba · Dec 24, 2022

Adding @Tomz for his comments.

Azarock35 · Dec 24, 2022

jpond262176 said:
Did it say what the malicious code is? If people on here are found to be spreading bad code they need banning straight away to stop them spreading more.

Sometimes you can get a false positive so the code may need checking.

I have just did a check with immunufy360 and there was something in /vendor/louis/log-view/resources/views/filemanager/index.blade.php that give root access.

My immunfy360 cleaned this file up. Check is needed.

I'm not buying the license precisely .. it's $ 5 I'll take it.

Azarock35 · Dec 24, 2022

@Tomz
it's serious there is a code that allows access to the server I have plesk so I have good security but those who do not have security must be in danger..

you must remove the script & ban the user I don't know who added this code / script but not the seller.

Azarock35 · Dec 24, 2022

jpond262176 said:
Did it say what the malicious code is? If people on here are found to be spreading bad code they need banning straight away to stop them spreading more.

Sometimes you can get a false positive so the code may need checking.

I have just did a check with immunufy360 and there was something in /vendor/louis/log-view/resources/views/filemanager/index.blade.php that give root access.

My immunfy360 cleaned this file up. Check is needed.

I deleted the subdomain with the files or installed acelle mail .. I will check the LOGs to see if there is a suspicious connection

jpond262176 · Dec 24, 2022

Luckily I had this on it's own sub domain so there was nothing else they could access apart from this application.

EDIT: Found it! I think. The little basted!

<?phpglobal $CONFIG, $use_auth, $auth_users, $theme, $cfg, $lang, $report_er - Pastebin.com

Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.

pastebin.com

It's a Tiny File Manager that gives access to the directories for upload. I pasted the code from index.blade.php.

it's in the download attachment under acelle-email-marketing-web-application-4.0.24_LTS.

\app\Model\Plugin.php references index.blade.php as well on line 565.
I have removed this application / sub domain completely until fully investigated.

Azarock35 · Dec 24, 2022

okay, I prefer not to take any risks if there are other virus codes in it...

I will buy directly or take another similar script
but I think it was the op who added the code or its source.

jpond262176 · Dec 24, 2022

Azarock35 said:
okay, I prefer not to take any risks if there are other virus codes in it...

Me too, I have now fully removed the sub domain as well until further investigation.

Not happy about this.

Azarock35 · Dec 24, 2022

did you report the script? do it . This is the first time I have an alert...

Mscv50 · Dec 24, 2022

Azarock35 said:
okay, I prefer not to take any risks if there are other virus codes in it...

I will buy directly or take another similar script
but I think it was the op who added the code or its source.

Is not always the case , a lot of Dev's also use this kind jokes to fight piracy lol

Azarock35 · Dec 24, 2022

Mscv50 said:
Is not always the case , a lot of Dev's also use this kind jokes to fight piracy lol

yes end you have to delete it in this case .. you remove the virus code then publish it ...

it's not funny if our servers are hacked .. there is clearly a problem with the script you must take action ..

jpond262176 · Dec 24, 2022

Mscv50 said:
Is not always the case , a lot of Dev's also use this kind jokes to fight piracy lol

I never knew this, I didn't think the devs would be that cruel. They not loosing money really because people just won't buy it in the first place. If it's used it gets out there more I would think.

These scripts are not cheap but I guess the upkeep of them isn't cheap either.

Mscv50 · Dec 24, 2022

Azarock35 said:
yes end you have to delete it in this case .. you remove the virus code then publish it ...

it's not funny if our servers are hacked .. there is clearly a problem with the script you must take action ..

Honestly, i can't answer your criticisms but you have to know one thing,
the purpose of all resources on here = try it before you buy it !

@Medw1311 @TassieNZ @Tomz please check this out

MrSam_1 · Dec 24, 2022

Mscv50 said:
Honestly, i can't answer your criticisms but you have to know one thing,
the purpose of all resources on here = try it before you buy it !

@Medw1311 @TassieNZ @Tomz please check this out

I've seen the reports but this isn't my area of expertise maybe @phpcore can check it out.

Mscv50 · Dec 24, 2022

Medw1311 said:
I've seen the reports but this isn't my area of expertise maybe @phpcore can check it out.

Yes, sorry about that i forget @phpcore lol.

To view the content, you need to Sign In or Register.

phpCore · Dec 24, 2022

jpond262176 said:
I never knew this, I didn't think the devs would be that cruel. They not loosing money really because people just won't buy it in the first place. If it's used it gets out there more I would think.

These scripts are not cheap but I guess the upkeep of them isn't cheap either.

For example the famous V3Cube script contain many shell scripts

phpCore · Dec 24, 2022

I can confirm what @Mscv50 said, the script was injected by the devs, why just check this file on the dev demo server

https://demo.acellemail.com/core/slider/filemanager.html

Azarock35 · Dec 24, 2022

so the developer can really access the server through a backdoor?

phpCore · Dec 24, 2022

Azarock35 said:
so the developer can really access the server through a backdoor?

No I don't think so but IT'S NOT IMPOSSIBLE, you need to do a full audit

jpond262176 · Dec 24, 2022

Azarock35 said:
so the developer can really access the server through a backdoor?

If that was the case i'm fairly sure they can be sued. In fact I know they could because for a developer to make back doors while using their software without telling the users. Certain countries will take them to the cleaners if the devs are doing this.

Acelle - Email Marketing Web Application v4.0.26-p87

Welcome to Original Babiato! All Resource are Free and No downloading Limit.. Join Our Official Telegram Channel For updates Bypass All the resource restrictions/Password/Key? Read here! Read Before submitting Resource Read here!Support Our Work By Donating Click here!

Join Our Official Telegram Channel For updates Bypass All the resource restrictions/Password/Key? Read here! Read Before submitting Resource Read here!

Support Our Work By Donating Click here!

Active member

Active member

Member

Member

Member

Active member

Member

Active member

Member

! 𝖎'𝖒 𝖜𝖆𝖙𝖈𝖍𝖎𝖓𝖌 𝖞𝖔𝖚 !

Member

Active member

! 𝖎'𝖒 𝖜𝖆𝖙𝖈𝖍𝖎𝖓𝖌 𝖞𝖔𝖚 !

Well-known member

! 𝖎'𝖒 𝖜𝖆𝖙𝖈𝖍𝖎𝖓𝖌 𝖞𝖔𝖚 !

ReLOADED

ReLOADED

Member

ReLOADED

Active member

Similar threads

Forum statistics

Share this page

Welcome to Original Babiato! All Resource are Free and No downloading Limit..
Join Our Official Telegram Channel For updates
Bypass All the resource restrictions/Password/Key? Read here!
Read Before submitting Resource Read here!
Support Our Work By Donating Click here!

Join Our Official Telegram Channel For updates
Bypass All the resource restrictions/Password/Key? Read here!
Read Before submitting Resource Read here!