Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Opcode show files of all accounts

Discussion in 'Security' started by bettinz, Nov 7, 2012.

  1. bettinz

    bettinz Member

    Joined:
    Jun 17, 2011
    Messages:
    19
    Likes Received:
    0
    Trophy Points:
    51
    Hello, I've installed Xcache on my vps. This problem appear with APC, too.

    I can see all files of all accounts stored on the server. For example:

    User "A" owner of "a.com" upload via fpt the /admin folder of xcache.

    So, for example, on my sites I've other 3 customers: B (owner of B.com) and C (owner of C.com).

    User A, load the admin folder, and he can see al the files of other customers (B and C). He can see the path of other sites, files cached, ecc. This appear with Xcache and APC. This is a BIG problem.
     
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice