11
Other / Re: Panel hacked and all my site infected
« Last post by overseer on November 19, 2025, 02:04:22 PM »We can't directly help you without more specifics. If you want us to take a look, what is the actual domain in question?
Please do read that thread anandmys linked -- completely. You can see how to disinfect the server and mitigate other PHP injection attacks. You need to secure your PHP Installation and disable any unused functions.
Please do read that thread anandmys linked -- completely. You can see how to disinfect the server and mitigate other PHP injection attacks. You need to secure your PHP Installation and disable any unused functions.
12
CSF Firewall / Re: 100's of suspicious emails an hour
« Last post by cyberspace on November 19, 2025, 11:55:16 AM »It looks like CSF/LFD sent the notification about too long working process. You can disable it or add the process to be ignored. Look at:
/etc/csf/csf.pignore
/etc/csf/csf.pignore
13
Other / Re: Panel hacked and all my site infected
« Last post by anandmys on November 19, 2025, 10:49:23 AM »Check this thread. You may get some hint
https://forum.centos-webpanel.com/centos-webpanel-bugs/critical-multiple-cwp-servers-infected-arbitrary-php-code-execution-via-publ/?topicseen
https://forum.centos-webpanel.com/centos-webpanel-bugs/critical-multiple-cwp-servers-infected-arbitrary-php-code-execution-via-publ/?topicseen
14
Other / Re: Panel hacked and all my site infected
« Last post by derak29 on November 19, 2025, 09:32:18 AM »15
Other / Panel hacked and all my site infected
« Last post by derak29 on November 19, 2025, 09:29:27 AM »My CWP panel hacked 3-4 months ago and i clear all hacker files. All pages indexed and url still active. when enter https://domain.com/?o=89095421 yes link going to the website home page but in google index i have 1000 indexed pages like this https://domain.com/?o=89095421 Reinstalled wordpress websites. Even i delete domain with account from server for check links with CWP default page but still url working. That mean website databases clean but something still on CWP panel. when i check the usrl https://domain.com/?o=89095421 in google inspection url still a live. I dont want resintall CWP and lot of accounts. Mybe someone have information and solution regarding my case.
16
Updates / AL 9.6, I have info about 240 updates
« Last post by venty on November 19, 2025, 07:11:28 AM »Hi,
I work with AL 9.6... Since yesterday, I have info about 240 updates:
https://prnt.sc/vRmNk7sYu7wR
... but nothing happens..., after I select update, nothing happens, and this information about 240 updates available appears again ...
BR
Venty
I work with AL 9.6... Since yesterday, I have info about 240 updates:
https://prnt.sc/vRmNk7sYu7wR
... but nothing happens..., after I select update, nothing happens, and this information about 240 updates available appears again ...
BR
Venty
17
Installation / Re: The encoded file /usr/local/cwpsrv/htdocs/admin/index.php has expired
« Last post by tg040 on November 17, 2025, 10:25:56 PM »I got it to work uploading the latest from your link. Thank you!
18
Installation / Re: The encoded file /usr/local/cwpsrv/htdocs/admin/index.php has expired
« Last post by overseer on November 17, 2025, 10:13:07 PM »Did you try the latest EL7 just to recover your install? CWP is CWP (but the installers for EL7 and EL8 are a bit different):
Code: [Select]
wget static.cdn-cwp.com/files/cwp/el7/cwp-el7-0.9.8.1218.zip19
Installation / Re: The encoded file /usr/local/cwpsrv/htdocs/admin/index.php has expired
« Last post by tg040 on November 17, 2025, 06:56:22 PM »Hi,
No, i downloaded el7. Could this be the problem?
How do i get el8 from https://control-webpanel.com/changelog? I tried
wget static.cdn-cwp.com/files/cwp/el8/cwp-el8-0.9.8.1182.zip
But no file is found.
Thank you.
No, i downloaded el7. Could this be the problem?
How do i get el8 from https://control-webpanel.com/changelog? I tried
wget static.cdn-cwp.com/files/cwp/el8/cwp-el8-0.9.8.1182.zip
But no file is found.
Thank you.
20
Installation / Re: The encoded file /usr/local/cwpsrv/htdocs/admin/index.php has expired
« Last post by overseer on November 17, 2025, 06:30:46 PM »Did you change the version number to the latest one (0.9.8.1218)? And use the EL8 version, not the old CentOS 7 version?
Recent Posts
