vJoomla Bug Located
 

The major exploit that necessitated vJoomla's removal from the mod area has been located. I'm currently trying various attack routines against the new version. If nothing breaks I'll have a new version online in a week or so. The new version number will be beta 1.3 -- I am removing release candidate status until I can be more sure of the code.

Bad news on the compatibility front - the correction to the exploit required the complete removal of Joomla's register globals emulation routine. Therefore vJoomla will NOT be compatible with any Joomla/Mambo module that requires register globals.

Mods, please relocate this thread if necessary - I wasn't sure where to put it.

thanks for the update

:cheers:

Any news on this ?

Any news?

If you actually went to their site, you'd see a friendly message ;).

http://www.vjoomla.com/

That friendly message was put up when the original exploit was discovered. It doesn't answer the poster's question relating to the original poster's update.

Cheers,

~Regs.

Well, if it's been there since the original exploit, it would seem that the author has abandoned it.

any news ?????