Escaping The Joomla Dangers!

I know that, in this day and age, many people need a website for their business. There is one problem though, not every business person knows how to get one. Joomla could potentially be the answer to this common problem, and to top it off, it is very user friendly. Joomla is open source so you won't need to pay any money, which means you have nothing to lose by giving it a try. The only real risk with regard to Joomla right now is that a vulnerability was recently discovered in it.

You may be wondering why this vulnerability exists. This vulnerability exists due to a certain TINYMCE editor, which includes a tiny browser plugin.This, enables the uploading of files without authentication. If attackers manage to successfully exploit this weakness then it is highly likely that these online attackers will be able to upload files with multiple extensions as well as execute arbitrary PHP code.

There is also an issue that exists which is related to files which are missing. The missing files check for JEXEC and unfortunately, run the risk of being exploited by malicious online attackers. If this is exploited in the correct manner, malicious online attackers can obtain confidential internal patch information.

Joomla is a wonderful content management system that is literally able to keep track of all the content on your web site. You can upload pictures and music fairly easily without much trouble. One of the great aspects with regard to using Joomla is that if you use it to make a web site for a client, the client is then able to edit information on the backend of the system very easily. Joomla will work with whatever browser you are using with the inclusion of Windows 6. Some of the files of Windows 6 include: A2P.EXE,  browmon.exe, CAT.EXE, clxtshar.dll as well as creatfil.exe.

Table 1. Different uses of Joomla

So which versions are affected? This vulnerability has been confirmed in version 1.5.12. The weakness has also been reported in all 1.5.12 versions as well as all the previous 1.5.x versions. The solution is for all Joomla users, who are currently making use of the insecure versions, to update to the 1.5.13 version immediately.