My main gallery using Zenphoto was hacked yesterday.
I spotted a series of PHP files scattered in the website, full directories as well as files hidden in the album and cache directories.
The website was running Zenphoto 1.4.12. I upgraded it to Zenphoto 1.4.13
The server does not seem to be running ImageMagick or at least it appears nowhere with the phpinfo() command.
Another of my websites running the MODx CMS on the same server was hacked in the past weeks, but I am not sure it is linked (I cleaned it and found nothing alarming on it)
Was there a security fix in V 1.4.13? Has anybody heard of a new vulnerability?