Hi community
Some days ago, my Hoster sends me a Mail and tells me, that a Virus/Malware was found on my Server.
I checked it, and found two files:
html/core/cache/mgr/min/minify_gallery,tree,ace,modx.texteditor,modx.view,ddview,fileuploader,album.items.view,album.panel.js_a449114373a255f0fd3356869dc7133f
html/core/cache/mgr/min/minify_gallery,tree,ace,modx.texteditor,modx.view,ddview,fileuploader,album.items.view,album.panel.js_a449114373a255f0fd3356869dc7133f.gz
I've uploaded both on Virus Total, and this result:
Antivirus : ClamAV
Result: Html.Exploit.CVE_2014_6342
https://www.virustotal.com/de/file/ece92e6f4b83e1f8e273c000e06820860506339db1a0dc8158bd9381afa5e578/analysis/1416256870/
Same Result on both files.
Is there a Security hole in my Modx installation?
I'm using MODX Revolution 2.3.1-pl (traditional).
best regards
Daniel
