The new released Joomla 1.5.11 was released on 03 June 2009, and contains 26 fixes, most security related issues.

There are several important fixes, just to mention:

Joomla! is prone to multiple cross-site scripting and HTML-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied input. These issues affect the 'com_user' component, the 'JA_Purity' template, and the administrative panel in the 'Site client' subproject of the application.

An attacker can exploit these issues to steal cookie-based authentication credentials and launch other attacks.

Versions prior to Joomla!1.5.11 are vulnerable.

There are other fixes regarding several RSS feeds related issues in 1.5.10 and prior.

Users are strongly encouraged to update their websites to the latest release following these instructions:

http://docs.joomla.org/Upgrading_1.5_from_an_existing_1.5x_version

Comments

Add New Search

Rick Lewis  - Vice - President     |Guest IP72.146.12.xxx |2009-06-13 18:19:49 I tried to log into the site but was notified that my login had been blocked. I have Joomla 1.0.13 and would like to upgrade - expecially for the security patch as I have had my site hacked. Rick Quote 0   0

admin  - The release is only for joomla 1.5   |SAdministrator |2009-06-14 20:08:35 For Joomla 1.0.x your version is the latest. It is very important to check if the extensions you use are not a security risk - this is much more probable the cause for the mishap on your site Quote 0   0

fr3em1nd  - hacked website     |Guest IP203.177.74.xxx |2009-06-22 06:32:02 this is disgusting, alot of our sites got hacked in one day its 4 and counting. hopefully this new release dont have new ISSUES! Quote 0   0

admin  - re: hacked website   |SAdministrator |2009-06-22 06:44:19 fr3em1nd wrote: this is disgusting, alot of our sites got hacked in one day its 4 and counting. hopefully this new release dont have new ISSUES! Yes, it's unfortunately that past Joomla releases turned out to have a lot of security issues. My advice is not only to upgrade to the latest version of joomla, but also check the issues with the extensions in your site - many 3rd party extensions have known security issues Quote 0   0

Write comment
Name:
Email:	do not notifynotify
Website:
Title:
UBBCode:	-color-aquablackbluefuchsiagraygreenlimemaroonnavyolivepurpleredsilvertealwhiteyellow -size-tinysmallmediumlargehuge
	Please input the anti-spam code that you can read in the image.

Powered by !JoomlaComment 3.26

3.26 Copyright (C) 2008 Compojoom.com / Copyright (C) 2007 Alain Georgette / Copyright (C) 2006 Frantisek Hliva. All rights reserved."