Security Bug - Forum | JoomShaper
Staff replied SP Page Builder

Security Bug

Asked by netcini 2 months ago Last activity 2 months ago

httpmywebpageexample.com/index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon
Attempted to leverage vulnerability in old version of SP Page Builder (PHP code upload).
i have a RSFirewall. RSFirewall show from unkown ips try to upload icon.
All the plugins uptodate but i get this error.
they try to upload icons. security bug please check sppagebuilder component.

Netcini

2 replies

Oldest first Newest first Most helpful
Pascal - HTProtect.org
2 months ago

Hello,

If you are running the latest version (6.6.2), the security vulnerability has been fixed. These firewall alerts only indicate that bots are still attempting to exploit it blindly.

Regards,
Pascal

Paul Frankowski Senior Staff
2 months ago · edited

Hi.

  1. Your Rsfirewall locks this request but it was already fixed in last SPPB update (6.2.2 from June).
  2. Bots are blind, so they are trying anyway, and you will see the same in logs for next weeks. The same for JCE etc.

This news is way overdue —no drama, no panic. You can close topic.

Log in to reply.