Joomla Getting Hammered

[Dark_Knight Participant]

So I just checked out Exploit-Db and man oh man Joomla is getting hammered. Check it :http://www.exploit-db.com/webapps

[Jhaddix Participant]

I <3 JOOMLA (and Codeigniter)

gimme gimme

[j0rDy Participant]

damn smartfilter…i’ll check when i get home…(better keep an eye on the updates!)

edit: not only joomla is getting hammered:

PHP 6.0 buffer overflow:
http://www.nullbyte.org.il/View_79_PHP%206.0%20Dev%20str_transliterate()%200Day%20Local%20Buffer%20Overflow%20Exploit.html

[Ketchup Participant]

Lots of vulnerable extensions.  I almost never run extensions on my Joomla sites, unless I have to.  Traditionally, Joomla itself has been pretty stable, but the extensions are written very poorly. 

[BillV Participant]

Yeah, I only quickly glanced but it looked like most of what’s listed is additional components/extensions. Guess the lesson, for those who don’t do it already, would be to inspect that stuff before just installing it onto your site.

[clanggedin Participant]

I see Joomla sites get hacked on a daily basis. I always warn them about install components but the customers always have the “I’ll never get hacked’ attitude, then months later they are calling needing help in finding out how their site got hacked.  LOL.

[Author]

Posts