I have been called by the hosting company i use today.
They said my website had been used by a spam bot network tonight and sended over 6000 mails.
They could also see what file they had ben exploited.
It was Assets/snippets/Reflect/snippet.reflect.php
Via de GET method or something they could include some code and there send the mail from.
I dont know exactly where the error is, but this is something you guys should know i thought.
It is a known issue. I suggest you subscribe to MODx security notices in the future.
The announcement is here:
http://modxcms.com/forums/index.php/topic,30875.0.html
The biggest issue, is not with MODx, but with the setup on vulnerable sites. Only sites with register_global=on are vulnerable.
MODx snippet-glossary 101:
Ditto = Content Lister -- Wayfinder == Menu Builder -- Jot = Comment Control
