Iresponse+ のテレグラム投稿

Please share the fix

to remove shell from your master run
find /usr/iresponse/public -type f -name '*.php' ! -name 'index.php' -exec rm -f {} \;

this only works if master does not use firewall, there is another bug that gives access from MTA servers, you can get the latest update in iresponse+ 4.8

here is the fixed file, replace the old on app/webservices/Tracking.php
then run chown -R apache:apache /usr/iresponse/app/webservices/Tracking.php

attacker uses the old code to get access to irepsonse

fix sql injection
app/webservices/Tracking.php

Version 4.8

❗️Urgent:iResponse+ V4.7 fiha FIX dyal backdoor o Nas li mazal ma5dat iResponse+ V4.7 diro back up ndata dyalkom.

3an7ot commands dbackups odiro share n had msg f gaa3 les groups kamlin

pg_dump -U username -N suppressions -f /root/ir_clients.sql ir_clients

pg_dump -U username -f /root/ir_system.sql ir_system

username bdlo b user dyalak.

Version 4.7

❗️Important: security update to fix a new discovered backdoor