Seguridad - Joomla 1.6 - Download Joomla 1.6, News about Joomla 1.6, Templates for Joomla 1.6, Extensions for Joomla 1.6

Seguridad en Joomla

[20091103] - Core - Front-End Editor Issue

There are no translations available.

Project: Joomla!
SubProject: com_content
Severity: Moderate
Versions: 1.5.14 and all previous 1.5 releases
Exploit type: Front-End Editing
Reported Date: 2009-September-05
Fixed Date: 2009-November-03

Description

When logged into the front end with Author access, it was possible to replace an article written by another user.

Affected Installs

All 1.5.x installs prior to and including 1.5.14 are affected.

Solution

Upgrade to latest Joomla! version (1.5.15 or newer).

Reported by Hannes Papenberg

Contact

The JSST at the Joomla! Security Center.

[20091103] - Core - XML File Read Issue

There are no translations available.

Project: Joomla!
SubProject: All
Severity: Low
Versions: 1.5.14 and all previous 1.5 releases
Exploit type: Extension Version Disclosure
Reporte...

[20090723] - Core - com_mailto Timeout Issue

Project: Joomla!
Subproject: com_mailto
Severity: Low
Versions: 1.5.13 and all previous 1.5 releases
Exploit type: Email
Reported Date: 28-July-2009
Fixed Date: 2009-July-30

Descriptio...

[20090722] - Core - Missing JEXEC Check

Project: Joomla!
Subproject: Framework
Severity: Moderate
Versions: 1.5.12 and all previous 1.5 releases
Exploit type: Path Disclosure
Reported Date: 21-July-2009
Fixed Date: 2009-Jul...

[20090722] - Core - File Upload

Project: Joomla!
Subproject: TinyMCE editor
Severity: Critical
Versions: 1.5.12
Exploit type: Image File upload
Reported Date: 22-July-2009
Fixed Date: 2009-July-22

Description

Tiny bro...

Download Joomla 1.5.13 to Joomla 1.5

Today 22 is released version 1.5.13 of Joomla. It solves a major security issue in version 1.5.12 so it is recommended to upgrade.

Here's the Spanish version of Joomla...

Joomla available 1.5.12 (RC)

From today we have available for download version 1.5.12 of Joomla. Eye, which is a Release Candidate and should not be used in production. To install this version to ver...