Joomla Joomla!12Pictures Component File Inclusion

September 25, 2007 in Content Management, File Inclusions, vulnerabilities
Tags: Access Bypass, joomla, Joomla 1.0.x

• Application: Joomla
• Affected Version: Joomla!12Pictures 1.x
• URL: http://www.renevanasten.net/components.html
• Bug Type: Malicious Access
• Risk Level: High
• Solution: Edit the source code or look for patch file.

Joomla!FlashFun Component File Inclusion – Joomla 1.0.x

September 20, 2007 in Content Management, File Inclusions
Tags: joomla, Joomla 1.0.x

• Application: Joomla
• Affected Version: Joomla!FlashFun 1.x
• URL: http://webscripts.softpedia.com
• Bug Type: File Inclusion
• Risk Level: High
• Solution: Edit the source code & contact to component developer.

Joomla Nice Talk Component SQL Injection

September 19, 2007 in Content Management, SQL Injection
Tags: joomla, Joomla 1.0.x

• Application: Joomla
• Affected Version: Nice Talk 0.x.
• URL: Nice Talk
• Bug Type: SQL Injection Attacks
• Risk Level: Critical
• Solution: Edit the source code and ensure the input is sanitised.

Joomla NeoRecruit Component SQL Injection – Joomla 1.0x

September 19, 2007 in Content Management, SQL Injection
Tags: joomla, Joomla 1.0.x

• Application: Joomla
• Affected Version: NeoRecruit 1.x
• URL: http://www.neojoomla.com/
• Bug Type: SQL Injection Attack
• Risk Level: Critical
• Solution: Update to version 1.4.1.