File2Store.info hack

Hey guys,

I have just uninstalled vbSEO 3.6.0 and re-installed (XML-Only). That solved the problem, however, I noticed that I see this message in the vbSEO interface:

Your config.xml is writable. Don't forget to update permissions after you finish updating the configuration for security purposes.

Even though I have the permissions set to 444. They were 644 previously. What gives? I am changing the permissions on this file: /public_html/forums/vbseo/resources/xml/config.xml

Is that the wrong file?

ok, fixed that pretty quick... sorry. Had to go to CPanel to change permissions because (for some reason) WS_FTP wasn't doing it anymore.

Any vulnerabilities I should be aware of? Or should I have completely re-uploaded all files for vbseo?

The 'hack' attaches itself to the config data/datastore, so refreshing that with re-importing the xml product should be enough.

Your host is likely the reason why your ftp client can't change permissions-- they likely have that feature disabled.