4 replies to this topic

[wiros]

Hi,

It seems I had a hack attack last week. The site was down for two days when I found out that that the permisions of some files and folders had been changed. Also the hosting company told me that some PHP script are unsafe so usPHP refuse to run the sripts
I ran acunetix myself and program gave we 35 scipts that are possibility vulnerable to Cross Site Scripting (XSS) attacks.

Anyone has this experience and can tell me how to secure the scripts?

Thanks, Robert

[Rémi Gaillard]

Hi,

What is your version of Prestashop ?

[Paul C]

Hmm. So are you saying that you think Prestashop is vulnerable, or are you saying that now your site has been hacked there are now 35 scripts that may be vulnerable to XSS?

I'm not sure what you've actually tested here.

Paul

[Rémi Gaillard]

In PrestaShop 1.2.5 we have fixed some XSS on front office.

Regards,

[wiros]

I use Version 1.2.5.0 - 0.212s at the moment.

Greeting, Robert
www.accu-company.nl