suphp not working ... security issue

Hi Guys

Not sure if i broke something on our server but as a test i uploaded a nasty script i found on a windows VPS. (milw0rm) Its a shell / file manager. Interesting thing is that it allows the user to browse the entire file system of the server. IE can see the etc/

This is very bad!!

Any ideas what to check for or if this happens on other peoples server?

CWP cannot run in windows server. Maybe you are confused.

Enable antivirus into CWP and mod_security and disable php_functions: eval(), exec() for client accounts.