Ike.ninja

• Project: Joomla!
• SubProject: CMS
• Impact: High
• Severity: Low
• Versions: 3.7.0 through 3.8.3
• Exploit type: SQLi
• Reported Date: 2017-November-17
• Fixed Date: 2018-January-30
• CVE Number: CVE-2018-6376

Description

The lack of type casting of a variable in SQL statement leads to a SQL injection vulnerability in the Hathor postinstall message.

Affected Installs

Joomla! CMS versions 3.7.0 through 3.8.3

Solution

Upgrade to version 3.8.4

Contact

The JSST at the Joomla! Security Centre.

• Project: Joomla!
• SubProject: CMS
• Impact: Moderate
• Severity: Low
• Versions: 3.7.0 through 3.8.3
• Exploit type: XSS
• Reported Date: 2018-January-20
• Fixed Date: 2018-January-30
• CVE Number: CVE-2018-6377

Description

Inadequate input filtering in com_fields leads to a XSS vulnerability in multiple field types, i.e. list, radio and checkbox.

Affected Installs

Joomla! CMS versions 3.7.0 through 3.8.3

Solution

Upgrade to version 3.8.4

Contact

The JSST at the Joomla! Security Centre.

Joomla 3.8.4 is now available. This is a security release for the 3.x series of Joomla addressing four security vulnerabilities and including over 100 bug fixes and improvements.

In the January 2018 survey we received responses from 1,805,260,010 sites across 213,053,157 unique domain names and 7,228,005 web-facing computers. This reflects a gain of 214,000 computers, but only 183,000 domains. Overall hostname growth was 71 million, although the number of active sites fell slightly, by 311,000. DPS powering GoDaddy’s Website Builder While the total […]

WordPress 4.9.2 is now available. This is a security and maintenance release for all versions since WordPress 3.7. We strongly encourage you to update your sites immediately. An XSS vulnerability was discovered in the Flash fallback files in MediaElement, a library that is included with WordPress. Because the Flash files are no longer needed for […]

Rank Performance Graph OS Outagehh:mm:ss FailedReq% DNS Connect Firstbyte Total 1 One.com Linux 0:00:00 0.000 0.165 0.037 0.110 0.110 2 Swishmail FreeBSD 0:00:00 0.000 0.121 0.055 0.110 0.156 3 Bigstep Linux 0:00:00 0.000 0.135 0.071 0.147 0.147 4 Multacom Linux 0:00:00 0.000 0.156 0.090 0.180 0.316 5 www.viawest.com Linux 0:00:00 0.005 0.249 0.008 0.189 0.189 […]