BoxSlots.com - Unmetered 100Mbit/1Gbit/2Gbit VPS from ?10.99/month (Netherlands)

[UnReaL69]

vm's removed? where are they stored? DB?

[rk-boxslots]

Hello,

Today at midnight GMT our billing systems were breached due to a flaw recently released by WHMCS, This let the intruder / Hacker wipe all databases, Everyone's service will be resumed, This is something we could not prevent we also have WHMCS checking all logs and points of entry our services are very tight so this is down to WHMCS or a serious die hard moron, I deeply apologise for this as this is a massive inconvenience not only to yourselves but to us also after the recent rapidspeeds issue, We are not like them We are not leaving We will have you back on-line as fast as possible i would really appreciate it if all those clients, not numbers friends, clients and many others would stand by us on this issue and allow us atleast 6 hours to rectify the wrong doing by such idiotic people, If anyone is mad or want's to rant at me then please PM it to me or grab me on Skype (rickie.murphy3) please do not flood this thread let everyone have a chance to read my post here and actually see the real issue.

With many thanks rickie.

Also, To any other hosts reading this, Please make sure you take backup's in 5 - 10 minute intervals until WHMCS has a proper fix for this bug.

[Krun!x]

@JamesGTX

That patch did nothing i applied it and someone still got access.

They must be some other exploit there. Recently, there were 2 serious exploits.
http://forum.whmcs.com/showthread.php?t=42121
http://forum.whmcs.com/showthread.php?t=43462

However, with the right server setup / permissions both of them wouldn't do any damage. PM me your logs if you are sure he got access AFTER you applied those patches, I'd like to take a look.

[dotvps]

@ Krun.

I'm not sure. but i applied the patch when i woke up on the 1st December.
The new one that is. the 4.x one was already applied. They got access i have a edited admin directory. and password protected directory they still got access.

what logs? i looked at admin log it has an IP from Jordan.

I looked at activity logs he made a new administrator looked admin.

[rtlx]

Thanks for update, Rickie. My VPS came online, but I can't connect to it and by the looks of it disk is empty. Does it mean we lost our data, or you'll restore it later?

[Ericminou]

What is funny (kind of) is that my old Rapid Share VPS is still up and kicking!!!

[downote]

it's sql injection, restore your database, and disable support ticket. Waiting for next update.

[bachbell]

mmm i buy a vps from you to save my data . and now my data has gone?

[Ericminou]

Mine seems to be back online, but clearly the configuration I was working on all day is gone.. please say it isnt so... that was a lot of work...

[bachbell]

i have a new and empty vps ... i wont get another backup from leaseweb cause i delete everything there before moving to boxslots and now all my data its erase... what the hell its this ....