[pmwiki-users] Hacked site - OLD code.

[Oliver Betz]

Crisses wrote:

>pmwiki-2.2.0-beta65
>
>Hacked to death.  Thankfully not on my server.  Obviously an XSS attack,
> got into the server, altered EVERY php file added base64 code to every page.

can you provide details how someone can gain access to a server
running PmWiki with a XSS attack?

As far as I see, I can't change any PHP file with my browser running
malicious scripts.

Oliver