how could this happen? has this happened to you? vbgallery

[Sean S]

Good afternoon everyone,

hope you all are having a good holiday weekend.

I was wondering if this has happened to any of you, and if not, to at least warn you about it. Today I got a email from my hosting company letting me know that my account and my website has been suspended do to phishing with a link of the phishing email at spamcop.net

http://www.spamcop.net/sc?id=z220467...action=display

looking at the source there is this line,

X-Source-Dir: static-design.com:/public_html/gall

in the /gall directory I had vbgallery installed. Does this mean that the spammer/such used the email system of vbgallery to send out this email.

I have no idea how they managed to do this but there is def. a security issue somewhere there and my account is suspended.

this has not happened to me in the past and I'm clueless of what to do or what i can do.

[henrikhansen]

What does Photopost say to this issue?

if the hacker had access to your ftp, everything is possible.. .you're not the first to have that exact problem with a phisher...

[Marco van Herwaarden]

Please discuss possible vulnerabilities on the website of the vendor.

PS It is often preferred if you make first contact in private when you discover a vulnerability in a product.