Skip to main content

Critical Security at Joomla 1.5.X before 1.5.6 Version

Two day ago, Our Official website has defaced by some one, They change layout our official website with another picture.
i have investigate, the hole is from Joomla software where our office use to built website.

to recover that's hole we must edited joomla source code at :
File : /components/com_user/models/reset.php

Line: 111-130
{1} - Replace ' with empty char
{3} - If you enter ' in token field then query will be looks like : "SELECT id FROM jos_users WHERE block = 0 AND activation = '' "

that's smart solution, than upgrade to higher joomla version.
Labels:

Comments

Post a Comment

Popular posts from this blog

How SMS Works

SMS, or Short Message Service, is the technology behind what we often refer to as ‘text messages’ or ‘SMSes’, as well as what allows for news alerts on cellular phones. In recent years SMS has ballooned to over a 50 billion dollar industry and is quickly taking the communications world by storm. Short Message Service actually refers to a framework that uniquely allows computers, or in this case phones, to communicate with each other without the need of a central hub. With SMS, phones can find each other, send short packets of information back and forth, and do it all without any central computer to guide them. But because the system does not rely upon fixed lines like a land based telephone system does, the amount of information that can be sent at one time is limited in size. This depends on the language spoken, but for English letters this typically means around 150 characters (Chinese and Japanese letters are limited to 70). Quite recently, however, new developments in the technolog...
Post a Comment
Read more

Computer Rental: Worth Your Money?

Is computer rental worth the money? Depending on the type of computer that you have a need for as well as the expenses that you plan to save, computer rental may or may not be the right road for you to go down. One thing is quite certain. That is, there are a number of companies out there right now wanting to provide you with the computer rental that you are after. They offer a wide range of products and services. But, is it worth spending your money on these computer rentals? Or, maybe you should just outright make the purchase? The value of the computer rental is dependent on the need that you have as well as the overall need you expect to have down the road. It makes sense that if you only plan to use the computers for a few days or weeks that you should consider the computer rental industry. Often times it is important to have a large group of computers ready to go but you really have no need for them after a certain point. This happens and it just makes complete sense to use compu...
Post a Comment
Read more

What is Preventive Maintenance Software?

Preventive Maintenance (PM) is defined as scheduled work done on a system to identify and fix any occurring issues before they become problems. The concept of preventive maintenance applies to many different industries. PM is often done on buildings, various types of machines, computers, institutions, as well as personal assets, including finances and property. A common example of preventive maintenance is a car getting its oil changed. Usually, this is done when the car is in good working order to prevent any future problems resulting from the car running on old oil. In the past, preventive maintenance was formed solely by personnel, but now computers manage much of the process. Computer programs can schedule the maintenance and send alerts to employees when work is needed. Another name for preventive maintenance software is computer maintenance management software (CMMS). These are software programs that allow users to identify and fix potential problems. Some common uses for prevent...
Post a Comment
Read more