Aliats.Es - Una aliança en tecnológia es una aposta segura

A dos dies de que surti la nova versió 1.6 de Joomla, l'equip a llençat una nova actualització del core del sistema que afecta a totes les versións 1.5 inclosa la 1.5.15 (ultima) i la recomanació es aplicar aquests fix de sistema.

Joomla! Security News

- Core - Negative Values for Limit and Offset * [20100423]

- Core - Installer Migration Script * [20100423]

- Core - Sessation Fixation * [20100423]

- Core - Password Reset Tokens * [20100423]

- Core - Negative Values for Limit and Offset * [20100423]

Posted: 23 Apr 2010 10:31 AM PDT

Project: Joomla!

* SubProject: All * Severity: Moderate * Versions: 1.5.15 and all previous 1.5 releases

* Exploit type: information Disclosure

* Reported Date: 2010-Feb-21

* Fixed Date: 2010-Apr-23

* Description If a user entered a URL with a negative query limit or offset, a PHP notice would display revealing information about the system. Affected Installs All 1.5.x installs prior to and including 1.5.15 are affected. Solution Upgrade to the latest Joomla! version (1.5.16 or later) Reported by Security List