Joomla! Forum - community, help and support

Posted: **Mon Jul 31, 2006 1:26 pm**

Remote file inclusion in admin.colophon.php. Vulnerable version = 1.2, other versions may also be affected.

Posted: **Mon Jul 31, 2006 1:48 pm**

Posted: **Mon Jul 31, 2006 2:16 pm**

Changed ttle to reflect Secunia advisory.

Developper's site has beed defaced btw:
http://www.sirjoe.it/components/com_jd- ... k.php?p=77

Posted: **Tue Aug 01, 2006 6:15 am**

Thanks, adding to the list.

Posted: **Wed Aug 02, 2006 11:15 pm**

You can use JM-Credits instead of Colophon. JM-Credits doesn't have that vulnerability and is much more configurable than Colophon.

I hope you like it!

Posted: **Thu Aug 03, 2006 6:11 am**

JM is MY trademark (short for Jean-Marie)

(just a French joke, totally OT)

Posted: **Tue Aug 29, 2006 11:33 pm**

Colophon is now in version 1.3.1 which includes fixes for the vulnerabiilities listed as well as some other updates. Site, which was NEVER 'defaced' BTW, is now back up and is in the process of being fully restored.

I have not abandoned this project or the other works at SchoolastechWorks, which include BadWords2 and I hope to get back on my feet after a extremely trying string of personal hardships and two tragic losses.

I'd appreciate it if the mods would update the listing as appropriate.

Joomla! Forum - community, help and support

[UPGRADE AVAIL.] Joomla Colophon

[UPGRADE AVAIL.] Joomla Colophon

Re: Joomla Colophon

Re: Joomla Colophon

Re: Joomla Colophon

Re: Joomla Colophon

Re: Joomla Colophon

Re: [ABANDONED] Joomla Colophon