Joomla! Discussion Forums

This is already a few days old, but I haven't seen anything about it here, so I thought I'd post it...

Originally published as a mambo exploit, the simplefaq component for joomla is also vulnerable to the following attack,

Hence I urge everyone using simplefaq to either update to the latest version or uninstall it.

Hope I'm saving some people from getting defaced here....

moderator note: Thanks for the heads up, though please don't post exploitable hacks on the forum please. Thanks for understanding.

Moving to  3rd Party/Non Joomla! Security Issues.

as moderator you should also remove working proof of hack concepts right???

I'll click the report button now.....

Thanks, I've removed the proof of concept.

It is actively developed from the developers here: http://www.parkviewconsultants.com/. The current version is 2.40, whereas the vulnerable version is marked down as 2.11. Don't know if the latest version also has this vulnerability.

afaik, v2.40 is not vulnerable to this attack.

Yep, I usually do. Forgot this time...

Correction,

v2.40 IS vulnerable to this attack!

Version 2.50 with a fix is released http://www.parkviewconsultants.com/content/view/38/45/

Thanks Aravot, marking the thread as solved and changing title to fix provided.

When I check that link I think this problem is not solved or your site is hacked or there is some other problem? There are many Warnings message when I try this link?

I think you fix this quickly.

Regards,

Shart

ps. there is image what I see when I try that link

That site has indeed been cracked. 

If I open the site to download the update I get a Virus waring
HTML/Infected.WebPage.Gen - Malware

This ofcourse does make me wonder if I should use that product at all.