Developer Network™ Security Announcements
This feed provides announcements of resolved security issues in Joomla! software releases.
For more information about the Joomla! Security Strike Team (JSST) and its processes, please review our Security article.
To report potential security issues, please follow the guidelines in the above referenced article. Please note that we are only able to provide support for the Joomla! CMS, Joomla! Framework, and *.joomla.org network of websites.
You can subscribe to notifications from this feed through a RSS reader.
- Project: Joomla!
- SubProject: TinyMCE editor
- Severity: Critical
- Versions: 1.5.12
- Exploit type: Image File upload
- Reported Date: 2009-July-22
- Fixed Date: 2009-July-22
Description
Tiny browser included with TinyMCE 3.0 editor allowed files to be uploaded and removed without logging in.
Affected Installs
Version 1.5.12 only
Solution
Upgrade to latest Joomla! version (1.5.13 or newer).
Contact
The JSST at the Joomla! Security Centre.
- Project: Joomla!
- SubProject: Site client
- Severity: Moderate
- Versions: 1.5.11 and all previous 1.5 releases
- Exploit type: XSS
- Reported Date: 2009-June-30
- Fixed Date: 2009-June-30
Description
An attacker can inject JavaScript or DHTML code that will be executed in the context of targeted user browser, allowing the attacker to steal cookies. HTTP_REFERER variable is not properly parsed.
Affected Installs
All 1.5.x installs prior to and including 1.5.11 are affected.
Solution
Upgrade to latest Joomla! version (1.5.12 or newer).
Contact
The JSST at the Joomla! Security Centre.
- Project: Joomla!
- SubProject: Site client
- Severity: Moderate
- Versions: 1.5.11 and all previous 1.5 releases
- Exploit type: XSS
- Reported Date: 2009-June-03
- Fixed Date: 2009-June-30
Description
An attacker can inject JavaScript code in a URL that will be executed in the context of targeted user browser.
Affected Installs
All 1.5.x installs prior to and including 1.5.11 are affected.
Solution
Upgrade to latest Joomla! version (1.5.12 or newer).
Contact
The JSST at the Joomla! Security Centre.
- Project: Joomla!
- SubProject: Admin client
- Severity: Moderate
- Versions: 1.5.11 and all previous 1.5 releases
- Exploit type: XSS
- Reported Date: 2009-June-22
- Fixed Date: 2009-June-30
Description
Some files were missing the check for JEXEC. These scripts will then expose internal path information of the host.
Affected Installs
All 1.5.x installs prior to and including 1.5.11 are affected.
Solution
Upgrade to latest Joomla! version (1.5.12 or newer).
Contact
The JSST at the Joomla! Security Centre.
- Project: Joomla!
- SubProject: com_users
- Severity: Moderate
- Versions: 1.5.10 and all previous 1.5 releases
- Exploit type: XSS
- Reported Date: 2009-April-30
- Fixed Date: 2009-June-02
Description
A XSS vulnerability exists in the user view of com_users in the administrator panel.
Affected Installs
All 1.5.x installs prior to and including 1.5.10 are affected.
Solution
Upgrade to latest Joomla! version (1.5.11 or newer).
Contact
The JSST at the Joomla! Security Centre.
- Project: Joomla!
- SubProject: ja_purity
- Severity: Moderate
- Versions: 1.5.10 and all previous 1.5 releases
- Exploit type: XSS
- Reported Date: 2009-April-06
- Fixed Date: 2009-June-02
Description
A XSS vulnerability exists in the JA_Purity template which ships with Joomla! 1.5.
Affected Installs
All 1.5.x installs prior to and including 1.5.10 are affected.
Solution
Upgrade to latest Joomla! version (1.5.11 or newer).
Contact
The JSST at the Joomla! Security Centre.
- Project: Joomla!
- SubProject: Site client
- Severity: Low
- Versions: 1.5.10 and all previous 1.5 releases
- Exploit type: XSS
- Reported Date: 2009-May-05
- Fixed Date: 2009-June-02
Description
Some values were output from the database without being properly escaped. Most strings in question were sourced from the administrator panel.
Affected Installs
All 1.5.x installs prior to and including 1.5.10 are affected.
Solution
Upgrade to latest Joomla! version (1.5.11 or newer).
Contact
The JSST at the Joomla! Security Centre.
- Project: Joomla!
- SubProject: com_content
- Severity: Low
- Versions: 1.5.9 and all previous 1.5 releases
- Exploit type: XSS
- Reported Date: 2009-March-12
- Fixed Date: 2009-March-27
Description
A XSS vulnerability exists in the category view of com_content.
Affected Installs
All 1.5.x installs prior to and including 1.5.9 are affected.
Solution
Upgrade to latest Joomla! version (1.5.10 or newer).
Contact
The JSST at the Joomla! Security Centre.
- Project: Joomla!
- SubProject: Multiple
- Severity: Moderate
- Versions: 1.5.9 and all previous 1.5 releases
- Exploit type: XSS and CSRV
- Reported Date: 2009-February-15
- Fixed Date: 2009-March-27
Description
A series of XSS and CSRF faults exist in the administrator application. Affected administrator components include com_admin, com_media, com_search. Both com_admin and com_search contain XSS vulnerabilities, and com_media contains 2 CSRF vulnerabilities.
Affected Installs
All 1.5.x installs prior to and including 1.5.9 are affected. The com_search XSS vulnerability requires that "Gather Search Statistics" be enabled to be exploitable (Disabled by default).
Solution
Upgrade to latest Joomla! version (1.5.10 or newer).
Contact
The JSST at the Joomla! Security Centre.
- Project: Joomla!
- SubProject: plg_xstandard
- Severity: High
- Versions: 1.5.8 and all previous 1.5 releases
- Exploit type: Directory Traversal
- Reported Date: 2009-January-7
- Fixed Date: 2009-January-9
Description
A crafted request can cause disclosure of the directory structure on the server (including any directory that php has access to).
Affected Installs
All 1.5.x installs prior to and including 1.5.8 are affected.
Solution
Upgrade to latest Joomla! version (1.5.9 or newer).
Contact
The JSST at the Joomla! Security Centre.