{"action":"created","issue":{"url":"https://api.github.com/repos/modxcms/evolution/issues/919","repository_url":"https://api.github.com/repos/modxcms/evolution","labels_url":"https://api.github.com/repos/modxcms/evolution/issues/919/labels{/name}","comments_url":"https://api.github.com/repos/modxcms/evolution/issues/919/comments","events_url":"https://api.github.com/repos/modxcms/evolution/issues/919/events","html_url":"https://github.com/modxcms/evolution/issues/919","id":188729870,"number":919,"title":"Security-fix 1.0.12 - 1.2 RC1","user":{"login":"dmi3yy","id":669491,"avatar_url":"https://avatars.githubusercontent.com/u/669491?v=3","gravatar_id":"","url":"https://api.github.com/users/dmi3yy","html_url":"https://github.com/dmi3yy","followers_url":"https://api.github.com/users/dmi3yy/followers","following_url":"https://api.github.com/users/dmi3yy/following{/other_user}","gists_url":"https://api.github.com/users/dmi3yy/gists{/gist_id}","starred_url":"https://api.github.com/users/dmi3yy/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dmi3yy/subscriptions","organizations_url":"https://api.github.com/users/dmi3yy/orgs","repos_url":"https://api.github.com/users/dmi3yy/repos","events_url":"https://api.github.com/users/dmi3yy/events{/privacy}","received_events_url":"https://api.github.com/users/dmi3yy/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":47,"created_at":"2016-11-11T10:27:44Z","updated_at":"2016-11-16T16:17:41Z","closed_at":null,"body":"http://extras.evolution-cms.com/packages/core/security-fix.html\r\nfast solution for fix. \r\n\r\n"},"comment":{"url":"https://api.github.com/repos/modxcms/evolution/issues/comments/260990729","html_url":"https://github.com/modxcms/evolution/issues/919#issuecomment-260990729","issue_url":"https://api.github.com/repos/modxcms/evolution/issues/919","id":260990729,"user":{"login":"pbowyer","id":89852,"avatar_url":"https://avatars.githubusercontent.com/u/89852?v=3","gravatar_id":"","url":"https://api.github.com/users/pbowyer","html_url":"https://github.com/pbowyer","followers_url":"https://api.github.com/users/pbowyer/followers","following_url":"https://api.github.com/users/pbowyer/following{/other_user}","gists_url":"https://api.github.com/users/pbowyer/gists{/gist_id}","starred_url":"https://api.github.com/users/pbowyer/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pbowyer/subscriptions","organizations_url":"https://api.github.com/users/pbowyer/orgs","repos_url":"https://api.github.com/users/pbowyer/repos","events_url":"https://api.github.com/users/pbowyer/events{/privacy}","received_events_url":"https://api.github.com/users/pbowyer/received_events","type":"User","site_admin":false},"created_at":"2016-11-16T16:17:41Z","updated_at":"2016-11-16T16:17:41Z","body":"@modxuser run the database query above to see if they've injected code into a plugin. The file uploaded (`js-min.php` for me) gives good access to the server, so that alone is compromise enough."}}
{"actor":{"display_login":"pbowyer"}}