vJoomla Bug Located

[Michael Morris]

The major exploit that necessitated vJoomla's removal from the mod area has been located. I'm currently trying various attack routines against the new version. If nothing breaks I'll have a new version online in a week or so. The new version number will be beta 1.3 -- I am removing release candidate status until I can be more sure of the code.

Bad news on the compatibility front - the correction to the exploit required the complete removal of Joomla's register globals emulation routine. Therefore vJoomla will NOT be compatible with any Joomla/Mambo module that requires register globals.

Mods, please relocate this thread if necessary - I wasn't sure where to put it.

[Grunt]

thanks for the update

:cheers:

[Ignicoccus]

Any news on this ?

[tintin74]

Any news?

[Dismounted]

If you actually went to their site, you'd see a friendly message ;).

http://www.vjoomla.com/

[Regs]

That friendly message was put up when the original exploit was discovered. It doesn't answer the poster's question relating to the original poster's update.

Cheers,

~Regs.

[Dismounted]

Well, if it's been there since the original exploit, it would seem that the author has abandoned it.

[friendfinder.co]

any news ?????