If you have a support question or comment, click the Post New Topic link below. Sytist Manual | Sytist Articles | Facebook Page.

Malware Scanner Lists Sytist File As Vulnerability

 
Please log in or Create an account to post or reply to topics.
 
Will Wenzel
43 posts
Wed Nov 07, 18
10:58 AM
Is anyone else getting messages from server malware scanners about sy-inc/PHPmailer/class.phpmailer.php? I keep getting compromised (malware put in folders on my server) and the scanner software says this file and its backup are my only vulnerabilities.
Tim - PicturesPro.com
10491 posts
admin
Wed Nov 07, 18
11:25 AM
I have not heard of anyone else with that issue. The PHPMailer version in there is 5.2.8. I searched and didn't find any vulnerabilities related to the PHPMailer version.

Is it possible that is a false positive? If you are not using PHPMailer (Settings -> Mail Sending Settings), you can delete that file.
 
 
 
 
 
Tim Grissett, DIA - PicturesPro.com || My Email Address: info@picturespro.com
Will Wenzel
43 posts
Thu Nov 08, 18
4:00 PM
Hi Tim, and thank you. I downloaded the github version of the file, and I have a difference. Instead of public $Host = 'localhost' in this block of code, I have
/**
* SMTP hosts.
* Either a single hostname or multiple semicolon-delimited hostnames.
* You can also specify a different port
* for each host by using this format: [hostname:port]
* (e.g. "smtp1.example.com:25;smtp2.example.com").
* You can also specify encryption type, for example:
* (e.g. "tls://smtp1.example.com:587;ssl://smtp2.example.com:465").
* Hosts will be tried in order.
* @type string
*/
public $Host = 'smtp.mijnhostingpartner.nl';

I'm guessing that I should re-install all my sytist files and that will update?
Tim - PicturesPro.com
10491 posts
admin
Fri Nov 09, 18
5:19 AM
You can just replace those files with the files from the Sytist update or installation files. If you don't have those files you can send me an email and I can send you the files.
 
 
 
 
 
Tim Grissett, DIA - PicturesPro.com || My Email Address: info@picturespro.com
Will Wenzel
43 posts
Fri Nov 09, 18
8:15 AM
Thanks Tim. It's probably some site I tried years ago as a smtp server and I just don't remember it, but I'd feel better with authentic files in place.
Loading more pages
Loading more pages

Sign up for email promotions.

Your information is safe with us and won't be shared.

Thank you for signing up!

 
©2003 - 2018 Grissett, LLC. All Rights Reserved.

By continuing to browse or by clicking Accept Cookies, you agree to the storing of cookies on your device necessary to provide you with the services available through our website.

    Accept   Privacy & Cookie Policy
Loading More Photos
Scroll To Top
Close Window
Loading
Close