suphp not working ... security issue

[screwloose]

Hi Guys

Not sure if i broke something on our server but as a test i uploaded a nasty script i found on a windows VPS. (milw0rm) Its a shell / file manager. Interesting thing is that it allows the user to browse the entire file system of the server. IE can see the etc/

This is very bad!!

Any ideas what to check for or if this happens on other peoples server?

[botonakis]

CWP cannot run in windows server. Maybe you are confused.

Enable antivirus into CWP and mod_security and disable php_functions: eval(), exec() for client accounts.