Simple Hack Threatens Outdated Joomla Sites

ronjor · Aug 12, 2013

If you run a site powered by the Joomla content management system and haven’t yet applied a critical update for this software released less than two weeks ago, please take a moment to do that: A trivial exploit could let users inject malicious content into your site, turning it into a phishing or malware trap for visitors.

The patch released on July 31, 2013 applies to Joomla 2.5.13 and earlier 2.5.x versions, as well as Joomla 3.1.4 and earlier 3.x versions. Joomla credits discovery of the bug to Web security firm Versafe, which says a simple exploit targeting the vulnerability is already in use. Joomla versions 2.5.14 and 3.1.5. fix a serious bug that allows unprivileged users to upload arbitrary .PHP files just by adding a “.” (period) to the end of PHP filenames.
Click to expand...

http://krebsonsecurity.com/2013/08/simple-hack-threatens-oudated-joomla-sites/

siljaline · Aug 12, 2013

From the nice folks at Malwarebytes:
http://blog.malwarebytes.org/intell...website-now-would-be-a-good-time-to-patch-it/

siljaline · Aug 13, 2013

Joomla patches file manager vulnerability responsible for hijacked websites.

Joomla has released a patch that addresses a critical vulnerability in their blogging and CMS platform, which if exploited allows an attacker the ability to bypass file-type upload restrictions. The flaw has been linked to several site compromises, as well as malware distribution and phishing campaigns.
Click to expand...

http://www.networkworld.com/news/2013/081213-joomla-patches-file-manager-vulnerability-272773.html

Log in or Sign up

Simple Hack Threatens Outdated Joomla Sites

ronjor Global Moderator

siljaline Registered Member

siljaline Registered Member

Log in or Sign up

Simple Hack Threatens Outdated Joomla Sites

ronjor Global Moderator

siljaline Registered Member

siljaline Registered Member

Useful Searches