Xsamxadoo back again, another time

[Prescol]

This malware now has the ability to infect those sites using Orderfiles module from MyPresta. At least, with older versions (my customer does not have an updated version).

An attacker can upload a php file directly

Php execution is not controlled under the upload folder. This can be easily prevented using a simple htaccess rule in the folders containing uploaded files:

 

php_flag engine off

 

[okom3pom]

Thank you for report ❤️