ColdFusion/Java strange script -


just found weird script on server of 1 of clients. i'm not cfml pro. can tell me if genuine coldfusion script or hacker shell , if does? name cf_fun.cfm

<cfset sf = createobject("java", "coldfusion.server.servicefactory")> <cfset rxml="">  <cftry>   <cfscript>    rxml = xmlnew();    rxml.xmlroot = xmlelemnew(rxml,"result");    rxml.result.xmltext = "0";   </cfscript>    <cfswitch expression="#trim(exec_mode)#">     <cfcase value="encode">      <cfscript>      sres = sf.datasourceservice.encryptpassword(param);      rxml.result.xmlchildren[1] = xmlelemnew(rxml,"param");      rxml.result.param.xmltext = param;      rxml.result.xmlchildren[2] = xmlelemnew(rxml,"encoded");      rxml.result.encoded.xmltext = sres;     </cfscript>    </cfcase>      <cfcase value="test">      <cfscript>       sf.datasourceservice.verifydatasource(param);     </cfscript>    </cfcase>      <cfcase value="commit">      <cfscript>       sf.datasourceservice.load();     </cfscript>    </cfcase>      <cfcase value="rollback">      <cfscript>       sf.datasourceservice.store();     </cfscript>    </cfcase>      <cfdefaultcase>      <cfthrow message="invalid command specified" errorcode = "1" >    </cfdefaultcase>    </cfswitch>  <cfcatch>     <cfscript>      rxml = xmlnew();      rxml.xmlroot = xmlelemnew(rxml,"result");      rxml.result.xmltext = "-1";      rxml.result.xmlchildren[1] = xmlelemnew(rxml,"description");      rxml.result.description.xmltext = cfcatch.message;     </cfscript> </cfcatch> </cftry>  <cfoutput>#rxml#</cfoutput>

you did not tell version of coldfusion running or found file? have never heard of before. searched coldfusion 9.0.1 server , not find anywhere. searched google , found specific reference file name here. makes seem though file part of plesk panel. reference found listed under parallels hosting company. using them hosting or using plesk panel? if so, appears legitimate file.

i found another post here parallel's team member replied "plesk not support coldfusion dsn , sandbox". since code shared appears related coldfusion datasources perhaps "hook" creating/editing dsns coldfusion using panel.

just guess...


Comments

Post a Comment

Popular posts from this blog

Change php variable from jquery value using ajax (same page) -

what i'm trying this: i've php global variable $currentid , simple jquery script check if there "id" (page) in hash of url , if yes wanted give value $currentid . i've been reading lot , notice shall use ajax i'm not managing it. my code is: <script type="text/javascript"> $(document).ready(function(){ if (parent.location.hash != '' ) { var thecurrentid = parent.location.hash.split('#')[1]; $.ajax({ url: 'my.php', //current page type: 'post', data: {theid: thecurrentid }, datatype: 'json', success: function () { } }); } // code here }); </script> could me please? thank in advance. php server side language, meaning once has sent data browser, php variables , data cannot changed... however, using ajax, can send request php page , change data in dom based on result. consider th...
Read more

Pull out data related to my apps from Android Play Store and iOS App Store -

i want pull out data related apps (ratings, reviews, etc) google play store , apple app store ? how can accomplish ? i have found open source apis google mentioned not reliable. also there paid apis (e.g. appfigures) available. has idea how able pull data these play stores ?? i looking direction on how can accomplish this. can suggest ? we (appfigures) have been working on developing infrastructure give ability reviews , bunch of other data points major app stores several years :] we make available via our api though may want check out.
Read more

How can I fetch data from a web server in an android application? -

i want retrieve data web server in android application, , don't know begin. should use web services? i recommend these tutorials: connect android php , mysql , json in android , php , mysqli i used these tutorials , managed trying working without difficulty. between them describe each step in how attempting @ each stage, android application, database , web server side , has information included can process , use received information the thing add connect android php , mysql tutorial makes use of mysql_ in php deprecated. better use mysqli why included third link. the basic outline of want this: 1) in android app make request server php script using class this: import java.io.bufferedreader; import java.io.ioexception; import java.io.inputstream; import java.io.inputstreamreader; import java.io.unsupportedencodingexception; import java.util.list; import org.apache.http.httpentity; import org.apache.http.httpresponse; import org.apache.http.namevaluepair...
Read more