Faille de sécurité dans le thème Arras.

Attention : ceux qui utilisent le thème Arras feraient bien de faire attention ces jours ci. Il y a des problèmes avec le fichier timthumb.php.

J’ai eu le tour (comme on dit dans le Nord) et j’ai déjà raconté ça ici. Heureusement d’ailleurs qu’OVH a mis en place des sécurités qui sont assez embarrassantes (site mis hors ligne instantanément) mais qui obligent au moins à réagir.

Quelques conseils :

  • Vérifiez votre site avec le plugin « exploit scanner« , il est capable de détecter le problème.
  • Tenez-vous au courant des évolutions de ce problème sur le site du thème Arras.
  • Si vous avez été confronté au problème envisagez de changer tout vos mot de passe (FTP, administrateur WordPress, BDD).

 


Tags : ,
Commentaires
  • Patrick dit :

    Bonjour,

    Ils ont eu le même problème chez les thèmes de ElegantThemes, toujours à cause de ce script qui gère les miniatures

    Patrick

  • Bloody dit :

    Ce n’est pas spécifique au thème Arras, mais à l’ensemble des thèmes utilisant le script timthumb.
    Cette faille a été signalée début août et immédiatement corrigée par Mark Maunder en réalisant TimThumb 2.0 à partir de son script WordThumb.

    Il y a plus d’info sur son site.

  • mattoo dit :

    et par ailleurs tous les themes ElegantThemes ont été corrigés en passant en 2.0, éliminant cette faille

  • Bruno dit :

    Bonjour,

    Apparemment depuis au moins la version 1.5.1.2 (il me semble que la dernière est celle ci)
    La faille a été corrigé

    Bruno

  • View this link below

    http://cookies-mega-exclue.blogspot.com/

    Filesonic premium account,filesonic premium cookies,wupload premium account,wupload premium cookies,hotfile premium account,hotfile premium cookies,megaupload premium account,megaupload premium cookies,alldebrid premium account,alldebrid premium cookies,fileape premium account,uploaded.to premium account,torrent download direct,use cookie via idm,javascripts,how to use cookies,cookies checker

  • apple store dit :

    merci pour l’explication ca va m’aider

  • GrandGames dit :

    Attention à certains thèmes wordpress (souvent gratuits) qui comportent des liens spam ou encore des failles, c’est une véritable plaie.

  • Gossipweek dit :

    Faudra faire attention en effet. merci pour l’info

  • absolutcycles dit :

    Merchandising convenience: It is difficult, for instance, to stack roundish items in the shelf but if they are contained in boxes with corners, showcasing them will be a lot easier. Various features may also help in sales, opening, resealing, and distribution.
    Security and tamper prevention: Child-proof and tamper-proof packaging systems are two of the more common indicators of security measures incorporated in product packages. Some others are RFID (radio frequency identification) indicators to help minimize shoplifting and pilferage, anti-tampering indicators or seals, and authentication tags to differentiate the product from its fakes or copies.

  • clos-gabriel dit :

    4. Reduce muscle and joint pain. There are many reasons you might be suffering from pain in your

    muscles or joints. Perhaps an old sports injury is the cause, or maybe you just spent too long on the

    stationary bike this morning. Either way, a nice steamy shower can be a great way to ease those aches

    and pains, especially when it involves nozzles that can be adjusted to aim that hot water exactly where

    it hurts.

  • 5. Look better. Let’s face it, people tend to be somewhat superficial and if the simple act of getting

    clean can mean giving your skin a special glow, then why not? The vapor not only clears out the pores,

    it helps to hydrate the skin and eliminate toxins, drawing blood to the surface. All this means you

    look great after you’ve had a quick cleanup… even if you skipped the cosmetics!
    Steam showers can be a great addition to any home. They’re good for your health, as well as your

    general well-being.

  • To really enjoy the summer to its fullest, you have to have the right fragrance to go along with your activities. The casual atmosphere of the summer and the fun floating in the air calls for just the right blend of ingredients to really bring out the best in a woman. Finding the perfect summer fragrance can be a little tricky on your own, so this is a list of the 5 best women perfumes of summer. You don’t have to do any research at all. Just look here for some simple guidance that may help you out on your next perfume purchase.

  • Lester vous dit :

    Ce n’est pas spécifique au chaussure Timberland thème Arras, mais à l’ensemble des thèmes utilisant le script timthumb

  • weight brand dit :

    d’ailleurs qu’OVH a mis en place nike free des sécurités qui sont assez embarrassantes (site mis hors ligne instantanément) mais qui obligent au moins à réagir

  • Antique anniversary clocks are absolutely excellent additions to any antique collection. In fact, many antique collectors would want to get their hands on rare and unique anniversary clock variants. Most of the antique anniversary clocks that you can find today are family heirlooms and treasured collections of serious collectors.
    Aaron Cane, an American clockmaker, introduced and patented the first forms of these time keepers in 1841. However, there were speculations that a German clockmaker named Anton Harder was the one who first developed it in 1879. While Harder was watching the servants light the candles on the rotating chandelier, he got inspired to formulate the idea behind the clock’s unique winding mechanism.

  • satania dit :

    The term ‘anniversary clocks’ was coined and copyrighted by an Ohio clock-making company called as Bowler and Burdock in 1901. Before this term was introduced, these antique clocks were once called as 400-day type. They were named as such because they were the first mechanical clocks that don’t require to be wounded constantly, unlike the 30-hour antique grandfather clock and 8-day antique mantle clock.
    When the Second World War ended, clockmakers were the first one to resume their work and production. Thousand of GI’s bought these remarkable timepieces at the Post Exchange as souvenirs.
    Back then, 13 clock makers produced about 125 styles of these clocks. Each model featured a distinct suspension system. However, as time pass by, the number of clockmakers was greatly reduced. That being said, finding reputable repair shops for the anniversary model became very difficult.

  • sleze dit :

    In watching programs like « Antiques Roadshow », you may have decided that investing in antique furniture is the way to make your future fortune. But many of these antique pieces are too flimsy to use and take up a lot of room to properly store. This is one reason why some collectors prefer to invest in antique Diebold safes. They aren’t only valuable, they’re functional.
    About Diebold
    Diebold is an American company based in Ohio that started in 1859 and still is around today with offices all over the world. The company is named after an enterprising locksmith named Charles Diebold. Their reputation was made from a tragic event – the great Chicago fire. Diebold safes survived the destruction. Although they now concentrate on automatics teller machines, vaults and security software they still make models of safes. Some of their first safes are still around today.

  • style outil dit :

    Il y a des problèmes avec le chaussures tn fichier timthumb

  • version serveur dit :

    ceux qui utilisent le thème Arras
    nike blazer pas cher feraient bien de faire attention ces jours ci

  • monde serveur dit :

    vaults and security software they still chaussures Timberland make models of safes. Some of their first safes are still around today

  • vous avez dit :

    il est capable de nike blazer pas cher détecter le problème

  • Orville Faure dit :

    They aren’t only valuable, they’re functional. Nike Air Max Pas Cher femme Although they now concentrate on automatics teller machines, vaults and security software they still make models of safes. Some of their first safes are still around today.

  • because they dit :

    Il y a des problèmes avec le nike blazer pas cher fichier timthumb

  • spelling dit :

    I love all the teeny cookies and your colour chaussures gucci choices are just perfect for the season

  • still around dit :

    Diebold safes survived the destruction clockmakers were the first one air yeezy 2 to resume their work and production

  • little looked dit :

    Il y a des problèmes avec le survetement Ralph Lauren fichier timthumb

  • lavoile-carry dit :

    You don’t have to do any research at all.http://www.lavoile-carry.fr Just look here for some simple guidance that may help you out on your next perfume purchase.

  • Sécuriser un site WordPress est un véritable casse tête je vous recommande l extension Itheme sécurity :securiser facilement et de façon intuitive son site WordPress.

  • Valentin dit :

    Aujourd’hui il me semble que tout cela est résolu
    A+

Réagissez à mattoo