Hello. The server which hosts the vJoomla package - has been ssh tunnel attacked multiple times in the last week. The entry point appears to be in one of the Joomla directories. Whether this is due to a problem in Joomla or the mods made for vJoomla I do not know. As a precaution I will be taking the mod down for the present.
I need to do a complete reinstall of the server OS as soon as possible and upgrade all packages on the machine. Only once these vulnerabilities have been closed up can the mod be retested to see if it is the vector by which the attack was launched. I am not sure if this is the case. Until I am certain the product is safe to use however I will not make it available. I am sorry for any inconvenience this will no doubt cause.
|