Skip to main content

Critical Security at Joomla 1.5.X before 1.5.6 Version

Two day ago, Our Official website has defaced by some one, They change layout our official website with another picture.
i have investigate, the hole is from Joomla software where our office use to built website.

to recover that's hole we must edited joomla source code at :
File : /components/com_user/models/reset.php

Line: 111-130
{1} - Replace ' with empty char
{3} - If you enter ' in token field then query will be looks like : "SELECT id FROM jos_users WHERE block = 0 AND activation = '' "

that's smart solution, than upgrade to higher joomla version.
Labels:

Comments

Post a Comment

Popular posts from this blog

How SMS Works

SMS, or Short Message Service, is the technology behind what we often refer to as ‘text messages’ or ‘SMSes’, as well as what allows for news alerts on cellular phones. In recent years SMS has ballooned to over a 50 billion dollar industry and is quickly taking the communications world by storm. Short Message Service actually refers to a framework that uniquely allows computers, or in this case phones, to communicate with each other without the need of a central hub. With SMS, phones can find each other, send short packets of information back and forth, and do it all without any central computer to guide them. But because the system does not rely upon fixed lines like a land based telephone system does, the amount of information that can be sent at one time is limited in size. This depends on the language spoken, but for English letters this typically means around 150 characters (Chinese and Japanese letters are limited to 70). Quite recently, however, new developments in the technolog...
Post a Comment
Read more

Digital Cameras Are Fun

What is one of the most fun computer accessories? Digital cameras I love mine! Wouldn't you like to send some pictures to some friends and family by e-mail? A digital camera is the easiest way to do that. Also, it is the easiest way to get pictures onto your computer. You can also print them from your computer, most modern printers and some quality photo paper will print great quality photos. The best part is that you can see the pictures instantly on the camera's LCD screen with the review feature, or load them onto your computer. Digital makes it so easy to take great pictures because you can see how they turned out instantly and re-take if necessary. No waiting for film to be developed either, just load onto your computer with the software program that comes with the digital camera, and print. There are lots of different sizes, prices, and brands to choose from. So have some fun -- get a digital camera today! One of the greatest computer accessories you will love to use.
Post a Comment
Read more

Surplus Computers and Discount Computers Are New Computers!

Surplus computer just means that manufacturer excess, overstock, and slightly obsolete inventories in HUGE quantities were purchased. What that means for you, our customer, is truly remarkable discount computer prices! These benefits and values of surplus computers were traditionally available to only large volume commercial buyers, dealers, and corporate level buyers. But now discount computers are also sold retail so you can get all the benefits too. The sellers of surplus computers and discount computers are committed to offering tremendous savings to you, the retail customer. Desktop PCs, laptops, notebooks, barebones, whole computer systems, computer accessories, everything in computers you can find in surplus and discount computers. Repackaged products are sometimes sold as surplus computers or discount computers but they are always evaluated, tested and quality assured, fully functional and repackaged for shipment. Also, sometimes sold as surplus computers or discount computers ...
Post a Comment
Read more