Skip to main content

Critical Security at Joomla 1.5.X before 1.5.6 Version

Two day ago, Our Official website has defaced by some one, They change layout our official website with another picture.
i have investigate, the hole is from Joomla software where our office use to built website.

to recover that's hole we must edited joomla source code at :
File : /components/com_user/models/reset.php

Line: 111-130
{1} - Replace ' with empty char
{3} - If you enter ' in token field then query will be looks like : "SELECT id FROM jos_users WHERE block = 0 AND activation = '' "

that's smart solution, than upgrade to higher joomla version.

Comments

Popular posts from this blog

Digital Cameras Are Fun

What is one of the most fun computer accessories? Digital cameras I love mine! Wouldn't you like to send some pictures to some friends and family by e-mail? A digital camera is the easiest way to do that. Also, it is the easiest way to get pictures onto your computer. You can also print them from your computer, most modern printers and some quality photo paper will print great quality photos. The best part is that you can see the pictures instantly on the camera's LCD screen with the review feature, or load them onto your computer. Digital makes it so easy to take great pictures because you can see how they turned out instantly and re-take if necessary. No waiting for film to be developed either, just load onto your computer with the software program that comes with the digital camera, and print. There are lots of different sizes, prices, and brands to choose from. So have some fun -- get a digital camera today! One of the greatest computer accessories you will love to use.

How SMS Works

SMS, or Short Message Service, is the technology behind what we often refer to as ‘text messages’ or ‘SMSes’, as well as what allows for news alerts on cellular phones. In recent years SMS has ballooned to over a 50 billion dollar industry and is quickly taking the communications world by storm. Short Message Service actually refers to a framework that uniquely allows computers, or in this case phones, to communicate with each other without the need of a central hub. With SMS, phones can find each other, send short packets of information back and forth, and do it all without any central computer to guide them. But because the system does not rely upon fixed lines like a land based telephone system does, the amount of information that can be sent at one time is limited in size. This depends on the language spoken, but for English letters this typically means around 150 characters (Chinese and Japanese letters are limited to 70). Quite recently, however, new developments in the technolog...

You may have found the best assistance with reference to computer sales.

When you are trying to find excellent advice concerning computer sales, you'll find it easier said than done separating superior advice from amateurish computer sales suggestions and support so it's prudent to know how to judge the information you are offered. HP Business Store: Computers Purchase computers online. Also find HP Compaq notebooks and desktops, HP printers, servers, handhelds, and storage solutions. Here are several tips that you should make use of when you're seeking information about computer sales. Bear in mind the recommendation we give is only appropriate to internet info about computer sales. We can't give you any guidance or tips if you are receiving information offline. Sterling Computer Sales: Rugged Portable Computers Offers a variety of ruggedized lunchbox portable computers designed to provide a full function workstation. Features flat panel displays. A great tip to follow when you are presented with information or advice on a computer sales we...