Messages

1

CentOS-WebPanel Bugs / Re: CVE-2025-48703 + CVE-2026-57517: the gsocket systemd backdoor CWP's

« on: July 22, 2026, 08:17:16 AM »

I have removed 3 entries from /etc/hosts
127.0.0.1 mya.cloudsyndication.org
127.0.0.1 gsocket.io
127.0.0.1 www.gsocket.io

and I have upgraded apache to version 2.4.66.
I have also checked numerous files on server, but I didn't find something suspicious.
Everything seems to work fine by now, but I am not sure if server is 100% clean.
Can you suggest something else that I should check?
Thank you

2

CentOS-WebPanel Bugs / Re: CVE-2025-48703 + CVE-2026-57517: the gsocket systemd backdoor CWP's

« on: July 21, 2026, 04:19:56 PM »

Hacker used CWP to get into server, not centos.
Not to mention that centos 8 is one of the OS that CWP recommends.

Anyhow, CWP was patched but hacker was already in.
Any suggestions on how to clean server?

3

CentOS-WebPanel Bugs / Re: CVE-2025-48703 + CVE-2026-57517: the gsocket systemd backdoor CWP's

« on: July 21, 2026, 09:16:30 AM »

I facing the same problem. Hacker have injected code in system files that make pages show different content to different users.
Found these entries in /etc/hosts
127.0.0.1 mya.cloudsyndication.org
127.0.0.1 gsocket.io
127.0.0.1 www.gsocket.io

and removed them. I restarted apache but nothing changed.
What else has to be done in order to remove all malicious code/files from server.
Running CWP  vesrion 0.9.8.1244  on CentOS Linux release 8.5.2111

Thank you

4

PHP / PHP http requests are blocked

« on: June 17, 2021, 06:19:41 PM »

Hi,

trying to get external file contect using file_get_contents and file functions, but they are blocked by ?

In php.ini I have
allow_url_fopen = On
allow_url_include = On

Any suggetions on what might be blocking these functions?

Thank you