Joomla! - the dynamic portal engine and content management system http://developer.joomla.org/security/news.html Sat, 04 Feb 2012 03:43:00 +0000 Joomla! - Open Source Content Management en-gb JoomlaSecurityNewshttp://feedburner.google.com http://feedproxy.google.com/~r/JoomlaSecurityNews/~3/PkBR45UJQxo/387-20120201-core-information-disclosure.html http://developer.joomla.org/security/news/387-20120201-core-information-disclosure.html <ul> <li><strong>Project:</strong> Joomla!</li> <li><strong>SubProject:</strong> All</li> <li><strong> Severity:</strong> Low</li> <li><strong>Versions:</strong> 2.5.0 and 1.7.0 - 1.7.4</li> <li><strong>Exploit type:</strong> Information Disclosure</li> <li><strong>Reported Date:</strong> 2012-January-29</li> <li><strong>Fixed Date:</strong> 2012-February-02</li> </ul> <h2>Description</h2> <p>Inadequate validation leads to information disclosure in administrator.</p> <h2>Affected Installs</h2> <p>Joomla! version 2.5.0, 1.7.4, and all earlier 1.7.x versions</p> <h2>Solution</h2> <p>Upgrade to version 1.7.5 or 2.5.1 or higher</p> <p>Reported by Jakub Galczyk</p> <h2>Contact</h2> <p>The JSST at the Joomla! Security Center.</p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/JoomlaSecurityNews?a=PkBR45UJQxo:tozT3WXEdn0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/JoomlaSecurityNews?d=yIl2AUoC8zA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/JoomlaSecurityNews/~4/PkBR45UJQxo" height="1" width="1"/> dextercowley@gmail.com (Mark Dexter) Thu, 02 Feb 2012 05:25:21 +0000 http://developer.joomla.org/security/news/387-20120201-core-information-disclosure.html http://feedproxy.google.com/~r/JoomlaSecurityNews/~3/MFhhodAeXho/388-20120202-core-information-disclosure.html http://developer.joomla.org/security/news/388-20120202-core-information-disclosure.html <ul> <li><strong>Project:</strong> Joomla!</li> <li><strong>SubProject:</strong> All</li> <li><strong> Severity:</strong> Moderate</li> <li><strong>Versions:</strong> 1.7.4 and all earlier 1.7.x versions</li> <li><strong>Exploit type:</strong> Information Disclosure</li> <li><strong>Reported Date:</strong> 2012-January-06</li> <li><strong>Fixed Date:</strong> 2012-February-02</li> </ul> <h2>Description</h2> <p>On some servers the error log could be read by unauthorised users.</p> <h2>Affected Installs</h2> <p>Joomla! version 1.7.4 and all earlier 1.7.x versions</p> <h2>Solution</h2> <p>Upgrade to version 2.5.1 or 1.7.5 or higher</p> <p>Reported by Alain Rivest</p> <h2>Contact</h2> <p>The JSST at the Joomla! Security Center.</p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/JoomlaSecurityNews?a=MFhhodAeXho:TcD6ohzsuCc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/JoomlaSecurityNews?d=yIl2AUoC8zA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/JoomlaSecurityNews/~4/MFhhodAeXho" height="1" width="1"/> dextercowley@gmail.com (Mark Dexter) Thu, 02 Feb 2012 05:25:21 +0000 http://developer.joomla.org/security/news/388-20120202-core-information-disclosure.html http://feedproxy.google.com/~r/JoomlaSecurityNews/~3/LY07jV4Rnvs/389-20120203-core-information-disclosure.html http://developer.joomla.org/security/news/389-20120203-core-information-disclosure.html <ul> <li><strong>Project:</strong> Joomla!</li> <li><strong>SubProject:</strong> All</li> <li><strong> Severity:</strong> Low</li> <li><strong>Versions:</strong> 2.5.0 and 1.7.0 - 1.7.4</li> <li><strong>Exploit type:</strong> Information Disclosure</li> <li><strong>Reported Date:</strong> 2012-January-29</li> <li><strong>Fixed Date:</strong> 2012-February-02</li> </ul> <h2>Description</h2> <p>Inadequate validation leads to path disclosure in administrator.</p> <h2>Affected Installs</h2> <p>Joomla! version 2.5.0, 1.7.4, and all earlier 1.7.x versions</p> <h2>Solution</h2> <p>Upgrade to version 2.5.1 or 1.7.5 or higher</p> <p>Reported by Jakub Galczyk</p> <h2>Contact</h2> <p>The JSST at the Joomla! Security Center.</p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/JoomlaSecurityNews?a=LY07jV4Rnvs:YgvDxlGAUzQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/JoomlaSecurityNews?d=yIl2AUoC8zA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/JoomlaSecurityNews/~4/LY07jV4Rnvs" height="1" width="1"/> dextercowley@gmail.com (Mark Dexter) Thu, 02 Feb 2012 05:25:21 +0000 http://developer.joomla.org/security/news/389-20120203-core-information-disclosure.html http://feedproxy.google.com/~r/JoomlaSecurityNews/~3/MYKnZ2QJKYE/382-20120101-core-information-disclosure.html http://developer.joomla.org/security/news/382-20120101-core-information-disclosure.html <ul> <li><strong>Project:</strong> Joomla!</li> <li><strong>SubProject:</strong> All</li> <li><strong> Severity:</strong> Low</li> <li><strong>Versions:</strong> 1.7.3 and all earlier 1.7 and 1.6 versions</li> <li><strong>Exploit type:</strong> Information Disclosure</li> <li><strong>Reported Date:</strong> 2012-January-07</li> <li><strong>Fixed Date:</strong> 2012-January-24</li> </ul> <h2>Description</h2> <p>Inadequate filtering leads to information disclosure.</p> <h2>Affected Installs</h2> <p>Joomla! version 1.7.3 and all earlier versions</p> <h2>Solution</h2> <p>Upgrade to version 1.7.4 or 2.5.0 or higher</p> <p>Reported by Cyrille Barthelemy</p> <h2>Contact</h2> <p>The JSST at the Joomla! Security Center.</p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/JoomlaSecurityNews?a=MYKnZ2QJKYE:LuZxJDgem44:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/JoomlaSecurityNews?d=yIl2AUoC8zA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/JoomlaSecurityNews/~4/MYKnZ2QJKYE" height="1" width="1"/> dextercowley@gmail.com (Mark Dexter) Mon, 23 Jan 2012 09:45:28 +0000 http://developer.joomla.org/security/news/382-20120101-core-information-disclosure.html http://feedproxy.google.com/~r/JoomlaSecurityNews/~3/XAEsWEG3dgU/383-20120102-core-xss-vulnerability.html http://developer.joomla.org/security/news/383-20120102-core-xss-vulnerability.html <ul> <li><strong>Project: </strong>Joomla!</li> <li><strong>SubProject:</strong> All</li> <li><strong>Severity:</strong> Moderate</li> <li><strong>Versions:</strong> 1.7.3 and all earlier 1.7 and 1.6 versions</li> <li><strong>Exploit type:</strong> XSS Vulnerability</li> <li><strong>Reported Date:</strong> 2011-November-16</li> <li><strong>Fixed Date:</strong> 2012-January-24</li> </ul> <h2>Description</h2> <p>Inadequate filtering leads to XSS vulnerability.</p> <h2>Affected Installs</h2> <p>Joomla! version 1.7.3 and all earlier versions</p> <h2>Solution</h2> <p>Upgrade to version 1.7.4 or 2.5.0 or higher</p> <p>Reported by Ankita Kapadia</p> <h2>Contact</h2> <p>The JSST at the Joomla! Security Center.</p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/JoomlaSecurityNews?a=XAEsWEG3dgU:63AinNntsww:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/JoomlaSecurityNews?d=yIl2AUoC8zA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/JoomlaSecurityNews/~4/XAEsWEG3dgU" height="1" width="1"/> dextercowley@gmail.com (Mark Dexter) Mon, 23 Jan 2012 09:45:28 +0000 http://developer.joomla.org/security/news/383-20120102-core-xss-vulnerability.html http://feedproxy.google.com/~r/JoomlaSecurityNews/~3/Ed0TMAvyQ4g/384-20120103-core-information-disclosure.html http://developer.joomla.org/security/news/384-20120103-core-information-disclosure.html <ul> <li><strong>Project:</strong> Joomla!</li> <li><strong>SubProject:</strong> All</li> <li><strong>Severity:</strong> Low</li> <li><strong>Versions:</strong> 1.7.3 and all earlier 1.7 and 1.6 versions</li> <li><strong>Exploit type:</strong> Information Disclosure</li> <li><strong>Reported Date:</strong> 2011-December-19</li> <li><strong>Fixed Date:</strong> 2012-January-24</li> </ul> <h2>Description</h2> <p>Inadequate filtering leads to information disclosure.</p> <h2>Affected Installs</h2> <p>Joomla! version 1.7.3 and all earlier versions</p> <h2>Solution</h2> <p>Upgrade to version 1.7.4 or 2.5.0 or higher</p> <p>Reported by Jean-Marie Simonet</p> <h2>Contact</h2> <p>The JSST at the Joomla! Security Center.</p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/JoomlaSecurityNews?a=Ed0TMAvyQ4g:blmC1ASORQc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/JoomlaSecurityNews?d=yIl2AUoC8zA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/JoomlaSecurityNews/~4/Ed0TMAvyQ4g" height="1" width="1"/> dextercowley@gmail.com (Mark Dexter) Mon, 23 Jan 2012 09:45:28 +0000 http://developer.joomla.org/security/news/384-20120103-core-information-disclosure.html http://feedproxy.google.com/~r/JoomlaSecurityNews/~3/K4UuOr8BroM/385-20120104-core-xss-vulnerability.html http://developer.joomla.org/security/news/385-20120104-core-xss-vulnerability.html <ul> <li><strong>Project:</strong> Joomla!</li> <li><strong>SubProject:</strong> All</li> <li><strong>Severity:</strong> Moderate</li> <li><strong>Versions:</strong> 1.7.3 and all earlier versions</li> <li><strong>Exploit type:</strong> XSS Vulnerability</li> <li><strong>Reported Date:</strong> 2012-January-22</li> <li><strong>Fixed Date:</strong> 2012-January-24</li> </ul> <h2>Description</h2> <p>Inadequate filtering leads to XSS vulnerability.</p> <h2>Affected Installs</h2> <p>Joomla! version 1.7.3 and all earlier 1.7 and 1.6 versions</p> <h2>Solution</h2> <p>Upgrade to version 1.7.4 or 2.5.0 or higher</p> <p>Reported by David Jardin</p> <h2>Contact</h2> <p>The JSST at the Joomla! Security Center.</p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/JoomlaSecurityNews?a=K4UuOr8BroM:a7HBKupbzlE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/JoomlaSecurityNews?d=yIl2AUoC8zA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/JoomlaSecurityNews/~4/K4UuOr8BroM" height="1" width="1"/> dextercowley@gmail.com (Mark Dexter) Mon, 23 Jan 2012 09:45:28 +0000 http://developer.joomla.org/security/news/385-20120104-core-xss-vulnerability.html http://feedproxy.google.com/~r/JoomlaSecurityNews/~3/JbROZtZZkvQ/374-20111102-core-password-change.html http://developer.joomla.org/security/news/374-20111102-core-password-change.html <ul> <li><strong>Project:</strong> Joomla!</li> <li><strong>SubProject:</strong> All</li> <li><strong>Severity:</strong> High</li> <li><strong>Versions:</strong> 1.7.2 and all 1.6.x versions</li> <li><strong>Exploit type:</strong> Password Change</li> <li><strong>Reported Date:</strong> 2011-October-28</li> <li><strong>Fixed Date:</strong> 2011-November-14</li> </ul> <h2>Description</h2> <p><span id=":1d2" dir="ltr">Weak random number generation during password reset leads to possibility of changing a user's password.<br /></span></p> <h2>Affected Installs</h2> <p>Joomla! version 1.7.2 and all earlier 1.7.x and 1.6.x versions</p> <h2>Solution</h2> <p>Upgrade to the latest Joomla! version (1.7.3 or later)</p> <p>Reported by Gregor Kopf and <span>David Jardin</span></p> <h2>Contact</h2> <p>The JSST at the <a href="http://developer.joomla.org/security.html" title="Contact the JSST">Joomla! Security Center</a>.</p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/JoomlaSecurityNews?a=JbROZtZZkvQ:e4a90cSPPRA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/JoomlaSecurityNews?d=yIl2AUoC8zA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/JoomlaSecurityNews/~4/JbROZtZZkvQ" height="1" width="1"/> dextercowley@gmail.com (Mark Dexter) Tue, 15 Nov 2011 04:33:00 +0000 http://developer.joomla.org/security/news/374-20111102-core-password-change.html http://feedproxy.google.com/~r/JoomlaSecurityNews/~3/nF-FZ-0jMUM/375-20111103-core-password-change.html http://developer.joomla.org/security/news/375-20111103-core-password-change.html <ul> <li><strong>Project:</strong> Joomla!</li> <li><strong>SubProject:</strong> All</li> <li><strong>Severity:</strong> High</li> <li><strong>Versions:</strong> 1.5.24 and all earlier 1.5 versions</li> <li><strong>Exploit type:</strong> Password Change</li> <li><strong>Reported Date:</strong> 2011-October-28</li> <li><strong>Fixed Date:</strong> 2011-November-14</li> </ul> <h2>Description</h2> <p><span id=":1d2" dir="ltr">Weak random number generation during password reset leads to possibility of changing a user's password.<br /></span></p> <h2>Affected Installs</h2> <p>Joomla! version 1.5.24 and all earlier 1.5 versions</p> <h2>Solution</h2> <p>Upgrade to the latest Joomla! 1.5 version (1.5.25 or later)</p> <p>Reported by <span>Gregor Kopf and David Jardin</span></p> <h2>Contact</h2> <p>The JSST at the <a href="http://developer.joomla.org/security.html" title="Contact the JSST">Joomla! Security Center</a>.</p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/JoomlaSecurityNews?a=nF-FZ-0jMUM:nNhJ-8IavSc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/JoomlaSecurityNews?d=yIl2AUoC8zA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/JoomlaSecurityNews/~4/nF-FZ-0jMUM" height="1" width="1"/> dextercowley@gmail.com (Mark Dexter) Tue, 15 Nov 2011 04:33:00 +0000 http://developer.joomla.org/security/news/375-20111103-core-password-change.html http://feedproxy.google.com/~r/JoomlaSecurityNews/~3/sz1HyAL_294/373-20111101-core-xss-vulnerability.html http://developer.joomla.org/security/news/373-20111101-core-xss-vulnerability.html <ul> <li><strong>Project:</strong> Joomla!</li> <li><strong>SubProject:</strong> All</li> <li><strong>Severity:</strong> Medium</li> <li><strong>Versions:</strong> 1.7.2 and all 1.6.x versions</li> <li><strong>Exploit type:</strong> XSS</li> <li><strong>Reported Date:</strong> 2011-October-21</li> <li><strong>Fixed Date:</strong> 2011-November-14</li> </ul> <h2>Description</h2> <p><span id=":1d2" dir="ltr">Inadequate filtering leads to XSS vulnerability in back end.<br /></span></p> <h2>Affected Installs</h2> <p>Joomla! version 1.7.2 and all earlier 1.7.x and 1.6.x versions</p> <h2>Solution</h2> <p>Upgrade to the latest Joomla! version (1.7.3 or later)</p> <p>Reported by <span>Corné Hannema</span></p> <h2>Contact</h2> <p>The JSST at the <a href="http://developer.joomla.org/security.html" title="Contact the JSST">Joomla! Security Center</a>.</p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/JoomlaSecurityNews?a=sz1HyAL_294:eau9ddWZMWw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/JoomlaSecurityNews?d=yIl2AUoC8zA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/JoomlaSecurityNews/~4/sz1HyAL_294" height="1" width="1"/> dextercowley@gmail.com (Mark Dexter) Tue, 15 Nov 2011 04:33:00 +0000 http://developer.joomla.org/security/news/373-20111101-core-xss-vulnerability.html http://feedproxy.google.com/~r/JoomlaSecurityNews/~3/_TyaH8ToZ98/370-20111001-core-information-disclosure.html http://developer.joomla.org/security/news/370-20111001-core-information-disclosure.html <ul> <li><strong>Project:</strong> Joomla!</li> <li><strong>SubProject:</strong> All</li> <li><strong>Severity:</strong> Moderate</li> <li><strong>Versions:</strong> 1.7.1</li> <li><strong>Exploit type:</strong> Information Disclosure</li> <li><strong>Reported Date:</strong> 2011-September-09</li> <li><strong>Fixed Date:</strong> 2011-October-17</li> </ul> <h2>Description</h2> <p><span id=":1d2" dir="ltr">Weak encryption causes potential information disclosure.<br /></span></p> <h2>Affected Installs</h2> <p>Joomla! version 1.7.1 and earlier</p> <h2>Solution</h2> <p>Upgrade to the latest Joomla! version (1.7.2 or later)</p> <p>Reported by Jeff Channell</p> <h2>Contact</h2> <p>The JSST at the <a href="http://developer.joomla.org/security.html" title="Contact the JSST">Joomla! Security Center</a>.</p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/JoomlaSecurityNews?a=_TyaH8ToZ98:Bdw0j-A8nR0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/JoomlaSecurityNews?d=yIl2AUoC8zA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/JoomlaSecurityNews/~4/_TyaH8ToZ98" height="1" width="1"/> dextercowley@gmail.com (Mark Dexter) Mon, 17 Oct 2011 20:59:00 +0000 http://developer.joomla.org/security/news/370-20111001-core-information-disclosure.html http://feedproxy.google.com/~r/JoomlaSecurityNews/~3/Nyl0K1n4nak/371-20111002-core-information-disclosure.html http://developer.joomla.org/security/news/371-20111002-core-information-disclosure.html <ul> <li><strong>Project:</strong> Joomla!</li> <li><strong>SubProject:</strong> All</li> <li><strong>Severity:</strong> Low</li> <li><strong>Versions:</strong> 1.7.1</li> <li><strong>Exploit type:</strong> Information Disclosure</li> <li><strong>Reported Date:</strong> 2011-August-02</li> <li><strong>Fixed Date:</strong> 2011-October-17</li> </ul> <h2>Description</h2> <p><span id=":1d2" dir="ltr">Inadequate error checking causes potential information disclosure.<br /></span></p> <h2>Affected Installs</h2> <p>Joomla! version 1.7.1 and earlier</p> <h2>Solution</h2> <p>Upgrade to the latest Joomla! version (1.7.2 or later)</p> <p>Reported by Aung Khant, YGN Ethical Hacker Group</p> <h2>Contact</h2> <p>The JSST at the <a href="http://developer.joomla.org/security.html" title="Contact the JSST">Joomla! Security Center</a>.</p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/JoomlaSecurityNews?a=Nyl0K1n4nak:YD53CN4ZPxc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/JoomlaSecurityNews?d=yIl2AUoC8zA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/JoomlaSecurityNews/~4/Nyl0K1n4nak" height="1" width="1"/> dextercowley@gmail.com (Mark Dexter) Mon, 17 Oct 2011 20:59:00 +0000 http://developer.joomla.org/security/news/371-20111002-core-information-disclosure.html http://feedproxy.google.com/~r/JoomlaSecurityNews/~3/Qzmq6A_Uzk4/372-20111003-core-information-disclosure.html http://developer.joomla.org/security/news/372-20111003-core-information-disclosure.html <ul> <li><strong>Project:</strong> Joomla!</li> <li><strong>SubProject:</strong> All</li> <li><strong>Severity:</strong> Moderate</li> <li><strong>Versions:</strong> 1.5.23 and earlier</li> <li><strong>Exploit type:</strong> Information Disclosure</li> <li><strong>Reported Date:</strong> 2011-September-09</li> <li><strong>Fixed Date:</strong> 2011-October-17</li> </ul> <h2>Description</h2> <p><span id=":1d2" dir="ltr">Weak encryption causes potential information disclosure.<br /></span></p> <h2>Affected Installs</h2> <p>Joomla! version 1.5.23 and earlier</p> <h2>Solution</h2> <p>Upgrade to the latest Joomla! version (1.5.24 or later)</p> <p>Reported by Jeff Channell</p> <h2>Contact</h2> <p>The JSST at the <a href="http://developer.joomla.org/security.html" title="Contact the JSST">Joomla! Security Center</a>.</p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/JoomlaSecurityNews?a=Qzmq6A_Uzk4:R0qeVJ8ZGR4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/JoomlaSecurityNews?d=yIl2AUoC8zA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/JoomlaSecurityNews/~4/Qzmq6A_Uzk4" height="1" width="1"/> dextercowley@gmail.com (Mark Dexter) Mon, 17 Oct 2011 20:59:00 +0000 http://developer.joomla.org/security/news/372-20111003-core-information-disclosure.html http://feedproxy.google.com/~r/JoomlaSecurityNews/~3/ud9WY8V6zwA/369-20110903-core-information-disclosure.html http://developer.joomla.org/security/news/369-20110903-core-information-disclosure.html <ul> <li><strong>Project:</strong> Joomla!</li> <li><strong>SubProject:</strong> All</li> <li><strong>Severity:</strong> Low</li> <li><strong>Versions:</strong> 1.7.0</li> <li><strong>Exploit type:</strong> Information Disclosure</li> <li><strong>Reported Date:</strong> 2011-September-23</li> <li><strong>Fixed Date:</strong> 2011-September-26</li> </ul> <h2>Description</h2> <p><span id=":1d2" dir="ltr">Inadequate error checking causes information disclosure.<br /></span></p> <h2>Affected Installs</h2> <p>Joomla! version 1.7.0</p> <h2>Solution</h2> <p>Upgrade to the latest Joomla! version (1.7.1 or later)</p> <p>Reported by National Vulnerability Database</p> <h2>Contact</h2> <p>The JSST at the <a href="http://developer.joomla.org/security.html" title="Contact the JSST">Joomla! Security Center</a>.</p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/JoomlaSecurityNews?a=ud9WY8V6zwA:bbi92clX2gw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/JoomlaSecurityNews?d=yIl2AUoC8zA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/JoomlaSecurityNews/~4/ud9WY8V6zwA" height="1" width="1"/> dextercowley@gmail.com (Mark Dexter) Mon, 26 Sep 2011 20:59:22 +0000 http://developer.joomla.org/security/news/369-20110903-core-information-disclosure.html http://feedproxy.google.com/~r/JoomlaSecurityNews/~3/0HLFpgWwqKw/367-20110901-core-xss-vulnerability.html http://developer.joomla.org/security/news/367-20110901-core-xss-vulnerability.html <ul> <li><strong>Project:</strong> Joomla!</li> <li><strong>SubProject:</strong> All</li> <li><strong>Severity:</strong> Medium</li> <li><strong>Versions:</strong> 17.0 and all 1.6.x versions</li> <li><strong>Exploit type:</strong> XSS</li> <li><strong>Reported Date:</strong> 2011-August-02</li> <li><strong>Fixed Date:</strong> 2011-September-22</li> </ul> <h2>Description</h2> <p><span id=":1d2" dir="ltr">Inadequate escaping leads to XSS vulnerability in com_search.<br /></span></p> <h2>Affected Installs</h2> <p>Joomla! version 1.7.0 and all 1.6.x versions</p> <h2>Solution</h2> <p>Upgrade to the latest Joomla! version (1.7.1 or later)</p> <p>Reported by Aung Khant</p> <h2>Contact</h2> <p>The JSST at the <a href="http://developer.joomla.org/security.html" title="Contact the JSST">Joomla! Security Center</a>.</p><div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/JoomlaSecurityNews?a=0HLFpgWwqKw:Zu2t6ae74kI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/JoomlaSecurityNews?d=yIl2AUoC8zA" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/JoomlaSecurityNews/~4/0HLFpgWwqKw" height="1" width="1"/> dextercowley@gmail.com (Mark Dexter) Fri, 23 Sep 2011 02:33:00 +0000 http://developer.joomla.org/security/news/367-20110901-core-xss-vulnerability.html