diff --git a/cms-ver.php b/cms-ver.php index ab589b9..02d261a 100644 --- a/cms-ver.php +++ b/cms-ver.php @@ -133,6 +133,7 @@ $versions = array( array("CakePHP","cake/config/config.php","\$config['Cake.version'] ="), array("phpFormGenerator", "/fields.php", "phpFormGenerator v"), // does not escape correctly array("ZenPhoto", "/zp-core/functions.php", "define('ZENPHOTO_VERSION',"), + array("ZenPhoto", "/zp-core/version.php","define('ZENPHOTO_VERSION',"), array("Eventum Issue Tracker", "/init.php", "define('APP_VERSION',"), // still need to work on these diff --git a/malware3.pl b/malware3.pl index 07c2116..6f3bcee 100644 --- a/malware3.pl +++ b/malware3.pl @@ -425,7 +425,6 @@ my @regexen = ( qr/<\?php\s+\$.+?;eval\(base64_decode\(gzuncompress\(base64_decode\(\$.+?\)\)\)\);\?>/is, qr/<\?php.+?\$EmailTemporario\s+=\s+\$email\[\$i\];.+?Safe\s+Mode:\s+<\?php\s+echo\s+\$safe_mode\s+=\s+\@ini_get\(\'safe_mode\'\);\s+\?>.+?<\/form>/is, qr/<\?php\s+\@ignore_user_abort\(true\);.+?\@eval\(\$.+?\@realpath\(\"\"\)\.DIRECTORY_SEPARATOR.+?404\s+Not\s+Found.+?\?>/is, - qr/\#\!\/usr\/bin\/perl\s+\-w\s+\'\'\=\~\(\'\(\?\{\'\.\(\'.+?\'\)\.\'\$\/\}\)\'\);/is, qr/<\?php\s+\/\*\*.+?\$https_in\s+=\s+\".+?\"\);\s+\?>/is, qr/<html>\s+<head>.+?if\(is_uploaded_file.+?move_uploaded_file.+?\?>\s+<\/body>\s+<\/html>/is, qr/<\?php\s+\/\/\s+\/\/\s+DK\s+Shell.+?preg_replace\(\"\/\.\*\/e\"\,.+?\?>\s+<\?\s+eval\(base64_decode\(.+?\)\);\s+\?>/is,