Hacker: BaseController.php Line: 336 Message: Invalid Controller: Name='icon', Format='' - Question | JoomShaper

Hacker: BaseController.php Line: 336 Message: Invalid Controller: Name='icon', Format=''

S

ssnobben

SP Page Builder 5 days ago

There is some hacker attempt there and hope you got this fixed and prevented as well.


Unhandled exception - InvalidArgumentException
site

A PHP Exception occurred on your site. Here you can find the stack trace:

Exception Type: InvalidArgumentException
File: /var/www/vhosts/site/httpdocs/libraries/src/MVC/Controller/BaseController.php
Line: 336
Message: Invalid controller: name='icon', format=''

#0 /var/www/vhosts/site/httpdocs/components/com_sppagebuilder/sppagebuilder.php(32): Joomla\CMS\MVC\Controller\BaseController::getInstance()
#1 /var/www/vhosts/site/httpdocs/libraries/src/Dispatcher/LegacyComponentDispatcher.php(71): require_once('...')
#2 /var/www/vhosts/site/httpdocs/libraries/src/Dispatcher/LegacyComponentDispatcher.php(73): Joomla\CMS\Dispatcher\LegacyComponentDispatcher::{closure:Joomla\CMS\Dispatcher\LegacyComponentDispatcher::dispatch():70}()
#3 /var/www/vhosts/site/httpdocs/libraries/src/Component/ComponentHelper.php(361): Joomla\CMS\Dispatcher\LegacyComponentDispatcher->dispatch()
#4 /var/www/vhosts/site/httpdocs/libraries/src/Application/SiteApplication.php(218): Joomla\CMS\Component\ComponentHelper::renderComponent()
#5 /var/www/vhosts/site/httpdocs/libraries/src/Application/SiteApplication.php(272): Joomla\CMS\Application\SiteApplication->dispatch()
#6 /var/www/vhosts/site/httpdocs/libraries/src/Application/CMSApplication.php(320): Joomla\CMS\Application\SiteApplication->doExecute()
#7 /var/www/vhosts/site/httpdocs/includes/app.php(58): Joomla\CMS\Application\CMSApplication->execute()
#8 /var/www/vhosts/site/httpdocs/index.php(51): require_once('...')
#9 {main}

Request information
GET variables

Array
(
    [option] => com_sppagebuilder
    [task] => icon.upload
)

POST variables

Array
(
)

COOKIE variables

Array
(
    [61ba2f65c4ea7cfa845eda520fb410b4] => 87846d72189ef5e1be7327233bbf77d2
)

REQUEST variables

Array
(
    [option] => com_sppagebuilder
    [task] => icon.upload
)

SERVER variables

Array
(
    [USER] => site_xxx
    [HOME] => vhosts/site
    [HTTP_CONTENT_TYPE] => multipart/form-data; boundary=c7a54e65525d0914c4f04720ef48ed39
    [HTTP_CONTENT_LENGTH] => 6111
    [HTTP_COOKIE] => 61ba2f65c4ea7cfa845eda520fb410b4=87846d72189ef5e1be7327233bbf77d2
    [HTTP_X_REQUESTED_WITH] => XMLHttpRequest
    [HTTP_ACCEPT_LANGUAGE] => en-US,en;q=0.5
    [HTTP_CONNECTION] => keep-alive
    [HTTP_ACCEPT] => text/html,application/xhtml+xml,*/*;q=0.8
    [HTTP_ACCEPT_ENCODING] => gzip, deflate, zstd
    [HTTP_USER_AGENT] => Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
    [HTTP_HOST] => www.site
    [REDIRECT_STATUS] => 200
    [SERVER_NAME] => www.site
    [SERVER_PORT] => 443
    [SERVER_ADDR] => 
    [REMOTE_PORT] => 64449
    [REMOTE_ADDR] => 160.187.210.180
    [SERVER_SOFTWARE] => nginx/1.30.4
    [GATEWAY_INTERFACE] => CGI/1.1
    [HTTPS] => on
    [REQUEST_SCHEME] => https
    [SERVER_PROTOCOL] => HTTP/1.1
    [DOCUMENT_ROOT] => /var/www/
    [DOCUMENT_URI] => /index.php
    [REQUEST_URI] => /index.php?option=com_sppagebuilder&task=icon.upload
    [SCRIPT_NAME] => /index.php
    [CONTENT_LENGTH] => 6111
    [CONTENT_TYPE] => multipart/form-data; boundary=c7a54e65525d0914c4f04720ef48ed39
    [REQUEST_METHOD] => POST
    [QUERY_STRING] => option=com_sppagebuilder&task=icon.upload
    [SCRIPT_FILENAME] => /var/www/vhosts/site/httpdocs/index.php
    [PATH_INFO] => 
    [FCGI_ROLE] => RESPONDER
    [PHP_SELF] => /index.php
    [REQUEST_TIME_FLOAT] => 1787619555.18
    [REQUEST_TIME] => 1787619555
    [argv] => Array
        (
            [0] => option=com_sppagebuilder&task=icon.upload
        )

    [argc] => 1
)

0
3 Answers
Paul Frankowski
Paul Frankowski
Accepted Answer
Senior Staff 5 days ago #232429

Hi,

  1. On what version of SPPB somebody tried that?
  2. Did he manage to upload the files or not?

I am more than sure that it was already fixed in 6.7.2+. I also have many firewall logs where bots trying to get it (attempts) using old holes (in SPPB, JCE, iCagenda etc). But they kick-out everytime.


UPDATE

I have also confirmation from our developer it was fixed in last updates. From my side I also recommend using extra firewall component to reduce this kind of hacker traffic and block those bots IP & request. It's just extra 90sec for you, there are free firewall's for Joomla as well.

Bots are "blind" they will try even when doors are closed. It's how it works for all extensions :/

0
S
ssnobben
Accepted Answer
5 days ago #232450

Ok thks for update! you can close this one then..

cheers!

0
Paul Frankowski
Paul Frankowski
Accepted Answer
Senior Staff 5 days ago #232454

Just click "Accept" button/link

0