خبری از جوملا سکیور

[shamimi 15]

[20120304] - Core - Password Change

http://feedproxy.google.com/~r/JoomlaSecurityNews/~3/JukET1dgfDM/394-20120304-core-password-change.html?utm_source=feedburner&utm_medium=email

Posted: 16 Mar 2012 12:21 AM PDT

Project: Joomla!

SubProject: All

Severity: High

Versions: 2.5.2, 2.5.1, 2.5.0, and all 1.7.x and 1.6.x releases

Exploit type: Password Change

Reported Date: 2012-March-8

Fixed Date: 2012-March-15

Description

Insufficient randomness leads to password reset vulnerability.

Affected Installs

Joomla! versions 2.5.2, 2.5.1, 2.5.0, and all 1.7.x and 1.6.x versions

Solution

Upgrade to version 2.5.3

Reported by George Argyros and Aggelos Kiayias

Contact

The JSST at the Joomla! Security Center.

[20120303] - Core - Privilege Escalation

http://feedproxy.google.com/~r/JoomlaSecurityNews/~3/n5w8L96w-LM/395-20120303-core-privilege-escalation.html?utm_source=feedburner&utm_medium=email

Posted: 15 Mar 2012 05:00 AM PDT

Project: Joomla!

SubProject: All

Severity: High

Versions: 2.5.2, 2.5.1, 2.5.0, and all 1.7.x and 1.6.x releases

Exploit type: Privilege Escalation

Reported Date: 2012-March-12

Fixed Date: 2012-March-15

Description

Programming error allows privilege escalation in some cases.

Affected Installs

Joomla! versions 2.5.2, 2.5.1, 2.5.0, and all 1.7.x and 1.6.x versions

Solution

Upgrade to version 2.5.3

Reported by Jeff Channel

Contact

The JSST at the Joomla! Security Center.

[shamimi 15]

حتما به نسخه 2.5.3 آپگرید کنید سیستم های خود را دوستان