Attention: Official List of Vulnerable 3rd Party Add-ons!!!

[rliskey]

Added several recent vulnerability reports, including:
VirtueMart
ZOOM Gallery
TaskHopper

http://help.joomla.org/component/option ... temid,268/

[rliskey]

Added RWCards < 2.4.4

From author:

Yesterday (27.0.3.2007) I released an updated version of RwCards (2.4.4) with a fixed "category id" parameter Remote SQL Query Injection Vulnerability
Anyone who uses an earlier version should immediately upgrade!

Ralf Weber

[rliskey]

Added entries for the modules Article, AutoStand (and for WordPress, a separate but often used application).

[rliskey]

Added Car Manager <= 1.1

[rliskey]

Added  Akocomment. SQL injection. All versions

[rliskey]

Updated JD-Wiki entry with link to nuWiki. JD-Wiki is abandoned. nuWiki is the replacement project.
http://help.joomla.org/component/option ... temid,268/

[rliskey]

Added Expose Flash Gallery RC4
http://forum.joomla.org/index.php/topic ... #msg909187

[Tonie]

Gmaps 1.00 added. Fix can be downloaded here.

[rliskey]

J! Reactions Vulnerability

Status: Critical

Versions: <= 1.8.x

Recovery Process:
Option 1: Immediately uninstall the current version, and check that all related files are deleted, and wait for the stable version.

Option 2: Copy the corrected code (listed in the forum discussion) into the vulnerable file.

More information:
http://forum.joomla.org/index.php/topic,202462.0.html

[rliskey]

sh404SEF version t, u, and 2 Vulnerability

Reported by the author here.