"When design became the key to the success of our website, working with Tony and Lennart really helped bring the project through successfully. Our site visits increased dramatically and I can count on the Webstix team to help me keep my content fresh when it's critical. Thank you!"

- John Russell
Marketing Director
Dream Rooms by Dream Kitchens

more>>

Subscribe to this Feed

Home

Support Blog

Joomla Update Released - 1.5.11

Joomla Update Released - 1.5.11

Written by Tony Herman

Monday, 29 June 2009

The Joomla 1.5.11 release is out. There are several security issues that have been fixed and users are strongly advised to upgrade their websites.

Recently the possibility of multiple cross-site and HTML-injection vulnerabilities has been detected in Joomla 1.5.10. This might cause the application to sufficiently sanitize user-supplied input. These issues affect the 'com_user' component, the 'JA_Purity' template, and the administrative panel in the 'Site client' subproject of the application

An attacker can exploit these issues to steal cookie-based authentication credentials and launch other attacks.

Versions prior to Joomla!1.5.11 are vulnerable.

Please contact Webstix to schedule your upgrade or we will be contacting you shortly about this issue.

Remember, all software has holes in it. These updates come from time to time when these holes are found and plugged. Since this software is being run on your website and it out there on the Web for anyone to try to attack, it needs to stay current and be updated whenever a hole is found. You can use your Webstix Maintenance Blocks for this work.

Thanks,
-Tony