Vulnerable Extensions List (Archived)
From Joomla! Documentation
(Difference between revisions)
(New page: <table border="1" cellpadding="3" cellspacing="3"> <tbody> <tr style="background-color: #ff9900" valign="bottom"> <th align="left">Name</th> <th align="left">Versions <br />...) |
|||
| (30 intermediate revisions by 9 users not shown) | |||
| Line 1: | Line 1: | ||
| + | {{underconstruction}} | ||
| + | For a more recent list please see [[Vulnerable_Extensions_List_oct]] | ||
| + | |||
<table border="1" cellpadding="3" cellspacing="3"> | <table border="1" cellpadding="3" cellspacing="3"> | ||
| − | |||
<tr style="background-color: #ff9900" valign="bottom"> | <tr style="background-color: #ff9900" valign="bottom"> | ||
| − | <th align="left">Name</th> | + | <th align="left" width="25%">Name</th> |
| − | + | <th align="left">Versions</th> | |
| − | + | ||
| − | + | ||
<th align="left">Solution</th> | <th align="left">Solution</th> | ||
<th align="left">References</th> | <th align="left">References</th> | ||
| − | <th>Updated </th> | + | <th>Updated</th> |
</tr> | </tr> | ||
<tr> | <tr> | ||
| − | <td | + | <td> |
| − | + | ||
| − | + | ||
| − | + | ||
<p> | <p> | ||
| − | + | <b>A6MamboCredits</b> | |
</p> | </p> | ||
| + | <p>com_a6mambocredits</p> | ||
</td> | </td> | ||
<td>All </td> | <td>All </td> | ||
| − | <td>Abandoned. | + | <td>Abandoned. Remove completely or use at your own risk.</td> |
| − | <td> | + | <td>[http://secunia.com/advisories/21540/ Secunia Advisory] <br /> |
| − | + | [http://forum.joomla.org/index.php/topic,86978.0.html Forum Topic]</td> | |
| − | + | ||
<td> 2006</td> | <td> 2006</td> | ||
| Line 40: | Line 37: | ||
</td> | </td> | ||
<td> All </td> | <td> All </td> | ||
| − | <td> Abandoned. | + | <td> Abandoned. Remove completely or use at your own risk. |
</td> | </td> | ||
<td> | <td> | ||
| − | + | [http://forum.joomla.org/index.php/topic,80890.0.html Forum Topic] <br /> | |
| − | + | [http://secunia.com/advisories/21540/ Secunia Advisory] <br /> | |
| − | + | [http://secunia.com/advisories/21227/ Secunia Advisory] | |
</td> | </td> | ||
<td> 2006</td> | <td> 2006</td> | ||
| Line 62: | Line 59: | ||
<td> <= 2.2.0</td> | <td> <= 2.2.0</td> | ||
<td> | <td> | ||
| − | Abandoned. | + | Abandoned. Remove completely or use at your own risk. |
</td> | </td> | ||
| − | <td> | + | <td> [http://forum.joomla.org/index.php/topic,76621.0.html Forum Topic]</td> |
<td> 2006</td> | <td> 2006</td> | ||
</tr> | </tr> | ||
| Line 75: | Line 72: | ||
<td>Upgrade to latest stable version. | <td>Upgrade to latest stable version. | ||
</td> | </td> | ||
| − | <td> | + | <td>[http://www.adobe.com/support/security/advisories/apsa07-01.html Adobe Advisory] |
</td> | </td> | ||
| − | <td> 2006</td> | + | <td>2006</td> |
</tr> | </tr> | ||
| Line 87: | Line 84: | ||
</td> | </td> | ||
| − | <td> | + | <td>[http://forum.joomla.org/index.php?topic=185805.msg882326#msg882326 Forum Topic]<br /> |
</td> | </td> | ||
<td>June 30, 2006<br /> | <td>June 30, 2006<br /> | ||
| Line 98: | Line 95: | ||
</td> | </td> | ||
<td> Upgrade to latest stable version.</td> | <td> Upgrade to latest stable version.</td> | ||
| − | <td> | + | <td> [http://www.milw0rm.com/exploits/3736 milwOrm Advisory]<br /> |
| − | + | [http://www.frsirt.com/english/adisories/2007/1394 FrSIRT Advisory]<br /> | |
| − | + | [http://forum.joomla.org/index.php/topic,160876.msg775119.html#msg775119 Forum Topic]</td> | |
| − | + | ||
| − | + | ||
<td> 26 June 2007<br /> | <td> 26 June 2007<br /> | ||
</td> | </td> | ||
| Line 122: | Line 117: | ||
</td> | </td> | ||
| − | <td> | + | <td>[http://forum.joomla.org/index.php/topic,76328.0.html Forum Topic] |
</td> | </td> | ||
<td>2006</td> | <td>2006</td> | ||
| Line 134: | Line 129: | ||
</td> | </td> | ||
<td> | <td> | ||
| − | <p> | + | <p>[http://www.milw0rm.com/exploits/3734 milwOrm Advisory] <br /> |
| − | + | [http://www.frsirt.com/english/advisories/2007/1392 FrSIRT Advisory]<br /> | |
| − | + | [http://forum.joomla.org/index.php/topic,160876.msg775119.html#msg775119 Forum Topic] | |
| − | + | ||
| − | + | ||
</p> | </p> | ||
<p> | <p> | ||
| Line 162: | Line 155: | ||
<td> No Fix Available. Disable or remove until a fix is available. | <td> No Fix Available. Disable or remove until a fix is available. | ||
</td> | </td> | ||
| − | <td> | + | <td>[http://forum.joomla.org/index.php/topic,81594.0.html Forum Topic] |
</td> | </td> | ||
<td> 2006</td> | <td> 2006</td> | ||
| + | </tr> | ||
| + | <tr> | ||
| + | <td> | ||
| + | <p> | ||
| + | <b>Bible Study</b> | ||
| + | </p> | ||
| + | <p> | ||
| + | |||
| + | com_biblestudy | ||
| + | </p> | ||
| + | </td> | ||
| + | <td> <= 6.0.7b and below | ||
| + | </td> | ||
| + | <td> Fix Available. SQL Insertion attack | ||
| + | </td> | ||
| + | <td>http://joomlacode.org/gf/project/biblestudy/ | ||
| + | |||
| + | </td> | ||
| + | <td> 2008</td> | ||
</tr> | </tr> | ||
<tr> | <tr> | ||
| Line 178: | Line 190: | ||
</td> | </td> | ||
<td> All </td> | <td> All </td> | ||
| − | <td> A patch is available from the developer. | + | <td> A patch is available from the developer. [http://forum.joomla.org/index.php/topic,87736.msg465256.html#msg465256 See this post.] </td> |
| − | <td> | + | <td> [http://secunia.com/advisories/21574/ Secunia Advisory] <br /> |
| − | + | [http://forum.joomla.org/index.php/topic,87736.0.html Forum Topic] </td> | |
<td> 2006</td> | <td> 2006</td> | ||
</tr> | </tr> | ||
| Line 198: | Line 210: | ||
<td>Upgrade to latest stable version.<br /> | <td>Upgrade to latest stable version.<br /> | ||
</td> | </td> | ||
| − | <td> | + | <td>[http://forum.joomla.org/index.php/topic,77899.0.html Forum Topic]<br /> |
| − | + | [http://secunia.com/advisories/22142/ Secunia Advisory] </td> | |
<td> 2006</td> | <td> 2006</td> | ||
</tr> | </tr> | ||
| Line 210: | Line 222: | ||
<td> No further information at this time.</td> | <td> No further information at this time.</td> | ||
| − | <td> | + | <td>[http://forum.joomla.org/index.php/topic,154777.msg748946.html#msg748946 Forum Topic] </b></td> |
<td> 26 June 2007<br /> | <td> 26 June 2007<br /> | ||
</td> | </td> | ||
| Line 228: | Line 240: | ||
<td>Upgrade to latest stable version.</td> | <td>Upgrade to latest stable version.</td> | ||
| − | <td> | + | <td>[http://forum.joomla.org/index.php/topic,82457.0.html Forum Topic]</td> |
<td> 2006</td> | <td> 2006</td> | ||
</tr> | </tr> | ||
| Line 244: | Line 256: | ||
<td> <= 1.2</td> | <td> <= 1.2</td> | ||
<td>Upgrade to latest stable version.</td> | <td>Upgrade to latest stable version.</td> | ||
| − | <td> | + | <td>[http://secunia.com/advisories/21288/ Secunia Advisory]<br /> |
| − | + | [http://forum.joomla.org/index.php/topic,81587.0.html Forum Topic]</td> | |
| − | + | ||
<td> 2006</td> | <td> 2006</td> | ||
</tr> | </tr> | ||
| Line 266: | Line 277: | ||
</p> | </p> | ||
<p> | <p> | ||
| − | + | [http://forum.joomla.org/index.php/topic,86525.msg441456.html#msg441456 See here for a fix for register_globals = off] | |
</p> | </p> | ||
</td> | </td> | ||
| − | <td> | + | <td>[http://www.joomlapolis.com/content/view/1538/37/ Jomopolis Topic]<br /> |
| − | + | [http://forum.joomla.org/index.php/topic,84436.0.html Forum Topic]<br /> | |
| − | + | [http://forum.joomla.org/index.php/topic,86525.msg441456.html#msg441456 Forum Topic]</td> | |
<td> 2006</td> | <td> 2006</td> | ||
| + | </tr> | ||
| + | <tr> | ||
| + | <td> | ||
| + | <p> | ||
| + | <b>DS-Syndicate</b> | ||
| + | |||
| + | </p> | ||
| + | <p> | ||
| + | com_ds-syndicate | ||
| + | </p> | ||
| + | </td> | ||
| + | <td>All versions?</td> | ||
| + | <td> | ||
| + | <p>SQL injection vulnerability.<br /> | ||
| + | Remove completely or use at your own risk.<br />Component has been removed from JED. Abandoned? | ||
| + | </p> | ||
| + | </p> | ||
| + | </td> | ||
| + | <td> | ||
| + | [http://www.frsirt.com/english/advisories/2008/2859 http://www.frsirt.com/english/advisories/2008/2859] | ||
| + | <td>Nov. 27, 2008</td> | ||
</tr> | </tr> | ||
<tr> | <tr> | ||
| Line 289: | Line 321: | ||
<td>Upgrade to latest stable version.</td> | <td>Upgrade to latest stable version.</td> | ||
| − | <td> | + | <td>[http://forum.joomla.org/index.php/topic,80411.0.html Forum Topic]</td> |
<td> 2006</td> | <td> 2006</td> | ||
</tr> | </tr> | ||
| Line 296: | Line 328: | ||
<td> RC4</td> | <td> RC4</td> | ||
| − | <td> | + | <td>[http://joomlacode.org/gf/project/expose/frs/?action=FrsReleaseView&release_id=5053 Download patch]<br /> |
</td> | </td> | ||
| − | <td> | + | <td>[http://forum.joomla.org/index.php/topic,192172.0.html Forum Topic]</td> |
<td>20 July 2007<br /> | <td>20 July 2007<br /> | ||
</td> | </td> | ||
| Line 315: | Line 347: | ||
<td> <= 0.9.1</td> | <td> <= 0.9.1</td> | ||
| − | <td> Upgrade to version 0.9.2. See | + | <td> Upgrade to version 0.9.2. See[http://forum.joomla.org/index.php/topic,75390.msg402249.html#msg402249 this post] for details. Also check the new forked project, JCal. </td> |
| − | <td> | + | <td> [http://secunia.com/advisories/19321/ Secunia Advisory]<br /> |
| − | + | [http://forum.joomla.org/index.php/topic,75390.0.html Forum Topic]<br /> | |
| − | + | [http://forum.joomla.org/index.php/topic,79050.0.html Forum Topic]<br /> | |
| − | + | [http://forum.joomla.org/index.php/topic,78268.0.html Forum Topic]</td> | |
<td> 2006</td> | <td> 2006</td> | ||
</tr> | </tr> | ||
| Line 335: | Line 367: | ||
<td> <= 1.4.6</td> | <td> <= 1.4.6</td> | ||
<td>Upgrade to latest stable version.</td> | <td>Upgrade to latest stable version.</td> | ||
| − | <td> | + | <td>[http://forum.joomla.org/index.php/topic,98973.0.html Forum Topic]</td> |
<td> 2006</td> | <td> 2006</td> | ||
| Line 352: | Line 384: | ||
<td> All </td> | <td> All </td> | ||
<td> Abandoned. Remove completely or use at your own risk.</td> | <td> Abandoned. Remove completely or use at your own risk.</td> | ||
| − | <td> | + | <td>[http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-3396 NVD Advisory]<br /> |
| − | + | [http://forum.joomla.org/index.php/topic,77706.0.html Forum Topic]</td> | |
<td> 2006</td> | <td> 2006</td> | ||
</tr> | </tr> | ||
| Line 369: | Line 401: | ||
</td> | </td> | ||
<td><=1.01 </td> | <td><=1.01 </td> | ||
| − | <td>Upgrade to the latest version, which can be downloaded | + | <td>Upgrade to the latest version, which can be downloaded [http://firestorm-technologies.com/component/option,com_docman/Itemid,27/task,doc_download/gid,22/ here]<br /> |
</td> | </td> | ||
| − | <td> | + | <td>[http://www.securityfocus.com/bid/25146 Security Focus Advisory]<br /> |
</td> | </td> | ||
<td> 6 August 2007</td> | <td> 6 August 2007</td> | ||
| Line 389: | Line 421: | ||
<td> Abandoned. Remove completely or use at your own risk.</td> | <td> Abandoned. Remove completely or use at your own risk.</td> | ||
| − | <td> | + | <td>[http://secunia.com/product/11046/ Secunia Advisory]<br /> |
</td> | </td> | ||
<td> 2006</td> | <td> 2006</td> | ||
| Line 404: | Line 436: | ||
</td> | </td> | ||
<td> <= 0.97</td> | <td> <= 0.97</td> | ||
| − | <td>Upgrade to | + | <td>Upgrade to [http://www.mosets.com/download/ latest stable version].</td> |
<td> No references available at this time.</td> | <td> No references available at this time.</td> | ||
| Line 421: | Line 453: | ||
</td> | </td> | ||
<td> <= 1.0.4</td> | <td> <= 1.0.4</td> | ||
| − | <td> Apply patch, download it | + | <td> Apply patch, download it [http://www.cellardoor.za.net/index.php?option=com_docman&task=cat_view&gid=1&Itemid=6 here], or use latest stable version.</td> |
<td> | <td> | ||
<p> | <p> | ||
| − | + | [http://secunia.com/advisories/23160/ Secunia Advisory]<br /> | |
| − | + | [http://www.cellardoor.za.net/ Cellardoor]<br /> | |
| − | + | [http://secunia.com/advisories/23160/ Secunia Advisory] | |
</p> | </p> | ||
</td> | </td> | ||
| Line 448: | Line 480: | ||
<td> | <td> | ||
<p> | <p> | ||
| − | + | [http://www.milw0rm.com/exploits/3753 MilwOrm Advisory] <br /> | |
| − | + | [http://www.frsirt.com/english/advisories/2007/1429 FrSIRT Advisory] | |
</p> | </p> | ||
| Line 473: | Line 505: | ||
</p> | </p> | ||
<p> | <p> | ||
| − | + | [http://forum.joomla.org/index.php/topic,86525.msg441456.html#msg441456 RG_EMULATION Fix] | |
</p> | </p> | ||
</td> | </td> | ||
| − | <td> | + | <td> [http://secunia.com/advisories/21059/ Secunia Advisory] <br /> |
| − | + | [http://forum.joomla.org/index.php/topic,76852.0.html Forum Topic] <br /> | |
| − | + | [http://forum.joomla.org/index.php/topic,86525.msg441513.html#msg441513 Forum Topic] <br /> | |
</td> | </td> | ||
<td>2006</td> | <td>2006</td> | ||
| Line 496: | Line 528: | ||
<td> <= 1.2.1</td> | <td> <= 1.2.1</td> | ||
<td>Upgrade to latest stable version.</td> | <td>Upgrade to latest stable version.</td> | ||
| − | <td> | + | <td>[http://forum.joomla.org/index.php/topic,77899.0.html Forum Topic]</td> |
<td> 2006</td> | <td> 2006</td> | ||
| Line 512: | Line 544: | ||
<td> <= 2.0-1.0 RC2</td> | <td> <= 2.0-1.0 RC2</td> | ||
<td> Patch Available. <br /> | <td> Patch Available. <br /> | ||
| − | See | + | See [http://forum.joomla.org/index.php/topic,81064.msg418374.html#msg418374 this post]. </td> |
| − | <td> | + | <td>[http://forum.joomla.org/index.php/topic,81064.0.html Forum Topic] </td> |
<td> 2006</td> | <td> 2006</td> | ||
</tr> | </tr> | ||
| Line 534: | Line 566: | ||
<p> | <p> | ||
Abandoned project. <br /> | Abandoned project. <br /> | ||
| − | Upgrade to | + | Upgrade to [http://joomlacode.org/gf/project/nuwiki/ nuWiki] |
</p> | </p> | ||
</td> | </td> | ||
| Line 540: | Line 572: | ||
<p> | <p> | ||
| − | + | [http://forum.joomla.org/index.php/topic,80188.msg427986.html#msg427986 Forum Topic] | |
</p> | </p> | ||
<p> | <p> | ||
| − | + | [http://forum.joomla.org/index.php?topic=177926.0 Forum Topic] | |
</p> | </p> | ||
</td> | </td> | ||
| Line 563: | Line 595: | ||
</td> | </td> | ||
<td>Upgrade to latest stable version. The developer fixed security issues but didn't create a higher version number.</td> | <td>Upgrade to latest stable version. The developer fixed security issues but didn't create a higher version number.</td> | ||
| − | <td> | + | <td>[http://secunia.com/advisories/21545/ Secunia Advisory] </td> |
<td> 2006</td> | <td> 2006</td> | ||
| Line 573: | Line 605: | ||
<td> Upgrade to latest stable version.</td> | <td> Upgrade to latest stable version.</td> | ||
| − | <td> | + | <td>[http://forum.joomla.org/index.php/topic,226147.0.html Forum Topic]</td> |
<td>27 Oct 2007<br /> | <td>27 Oct 2007<br /> | ||
</td> | </td> | ||
| Line 590: | Line 622: | ||
<td> Upgrade to latest stable version.</td> | <td> Upgrade to latest stable version.</td> | ||
| − | <td> | + | <td>[http://forum.joomla.org/index.php/topic,163589.msg847010.html#msg847010 Forum Topic]</td> |
<td> 26 June 2007<br /> | <td> 26 June 2007<br /> | ||
</td> | </td> | ||
| Line 626: | Line 658: | ||
<td> <= 1.2.4</td> | <td> <= 1.2.4</td> | ||
| − | <td>Upgrade to latest stable version. | + | <td>Upgrade to latest stable version. [http://www.thejfactory.com] </td> |
| − | <td> | + | <td>[http://forum.joomla.org/index.php?topic=180367 Forum Topic] |
</td> | </td> | ||
<td> May 2007</td> | <td> May 2007</td> | ||
| Line 643: | Line 675: | ||
</td> | </td> | ||
<td> <= 1.0b2</td> | <td> <= 1.0b2</td> | ||
| − | <td>Upgrade to latest stable version. | + | <td>Upgrade to latest stable version. [http://forge.joomla.org/sf/frs/do/viewRelease/projects.lmo/frs.com_lmo.com_lmo_1_0_b3 ] </td> |
| − | <td> | + | <td> [http://www.frsirt.com/english/advisories/2006/3063 FrSIRT Advisory] <br /> |
| − | + | [http://forum.joomla.org/index.php/topic,81590.0.html Forum Topic] </td> | |
<td> 2006</td> | <td> 2006</td> | ||
| Line 660: | Line 692: | ||
</td> | </td> | ||
<td> <= 4.0j</td> | <td> <= 4.0j</td> | ||
| − | <td> Upgrade to version 4.1 then apply Security Patch 1. | + | <td> Upgrade to version 4.1 then apply Security Patch 1. [http://mamboxchange.com/frs/?group_id=39&release_id=5995 Download here].</td> |
| − | <td> | + | <td> [http://forum.joomla.org/index.php/topic,76337.0.html Forum Topic] <br /> |
| − | + | [http://mamboxchange.com/forum/forum.php?forum_id=7638 MamboExchange Advisory]</td> | |
| − | + | ||
<td> 2006</td> | <td> 2006</td> | ||
</tr> | </tr> | ||
| Line 697: | Line 728: | ||
<td> <= 1.x</td> | <td> <= 1.x</td> | ||
| − | <td> Upgrade to 1.5 (or to Joom!Fish) | + | <td> Upgrade to 1.5 (or to Joom!Fish) [http://mamboxchange.com/frs/download.php/4518/MambelFish_1.5.zip Download Mambelfish<br />] [http://extensions.joomla.org/component/option,com_mtree/task,viewlink/link_id,460/Itemid,35/ Download Joom!Fish] </td> |
| − | + | <td> [http://secunia.com/advisories/21544/ Secunia Advisory] </td> | |
| − | <td> | + | |
<td> 2006</td> | <td> 2006</td> | ||
</tr> | </tr> | ||
| Line 719: | Line 749: | ||
<td> All</td> | <td> All</td> | ||
<td> Abandoned. Remove completely or use at your own risk.</td> | <td> Abandoned. Remove completely or use at your own risk.</td> | ||
| − | <td> | + | <td> [http://forum.joomla.org/index.php/topic,81616.0.html Forum Topic] <br /> |
| − | + | [http://www.frsirt.com/english/advisories/2006/3054 FrSIRT Advisory] </td> | |
<td> 2006</td> | <td> 2006</td> | ||
</tr> | </tr> | ||
| Line 739: | Line 769: | ||
<td> | <td> | ||
<p> | <p> | ||
| − | + | [http://securityreason.com/exploitalert/846 Security Reason Advisory] [http://forum.joomla.org/index.php/topic,76898.0.html Forum Topic] <br /> | |
| − | + | [http://securityreason.com/exploitalert/846 Security Reason] | |
| − | + | ||
</p> | </p> | ||
</td> | </td> | ||
| Line 758: | Line 787: | ||
</td> | </td> | ||
<td> <= 1.5.8</td> | <td> <= 1.5.8</td> | ||
| − | <td>Upgrade to latest stable version. | + | <td>Upgrade to latest stable version. [http://www.mosets.com/download/] </td> |
| − | <td> | + | <td> [http://forum.joomla.org/index.php/topic,78298.0.html Forum Topic] </td> |
<td> 2006</td> | <td> 2006</td> | ||
| Line 774: | Line 803: | ||
</td> | </td> | ||
<td> <= 1.0.8</td> | <td> <= 1.0.8</td> | ||
| − | <td> Temporary Fix Available. See | + | <td> Temporary Fix Available. See [http://forum.joomla.org/index.php/topic,78533.0.html this thread] for details.</td> |
| − | <td> | + | <td> [http://forum.joomla.org/index.php/topic,78533.0.html Forum Topic] </td> |
<td> 2006</td> | <td> 2006</td> | ||
</tr> | </tr> | ||
| Line 792: | Line 821: | ||
<td> Abandoned. Remove completely or use at your own risk.</td> | <td> Abandoned. Remove completely or use at your own risk.</td> | ||
| − | <td> | + | <td> [http://forum.joomla.org/index.php/topic,76331.0.html Forum Topic] </td> |
<td> 2006</td> | <td> 2006</td> | ||
</tr> | </tr> | ||
| Line 812: | Line 841: | ||
</td> | </td> | ||
<td> Abandoned. Remove completely or use at your own risk.</td> | <td> Abandoned. Remove completely or use at your own risk.</td> | ||
| − | <td> | + | <td> [http://secunia.com/advisories/21168/ Secunia Advisory] <br /> |
| − | + | [http://forum.joomla.org/index.php/topic,77977.0.html Forum Topic] <br /> | |
</td> | </td> | ||
<td> 2006</td> | <td> 2006</td> | ||
| Line 829: | Line 858: | ||
</td> | </td> | ||
<td> <= 2.0.0 RC5 Unpatched</td> | <td> <= 2.0.0 RC5 Unpatched</td> | ||
| − | <td> | + | <td> [http://projects.j-prosolution.com/project-news/opensef-news/security-patch-for-opensef.html Download patch] </td> |
| − | <td valign="top"> | + | <td valign="top"> [http://forum.joomla.org/index.php/topic,77301.0.html Forum Topic] </td> |
<td> 2006</td> | <td> 2006</td> | ||
</tr> | </tr> | ||
| Line 846: | Line 875: | ||
<td> <= 1.3.1</td> | <td> <= 1.3.1</td> | ||
<td> No Fix Available. Disable or remove.</td> | <td> No Fix Available. Disable or remove.</td> | ||
| − | <td> | + | <td> [http://www.frsirt.com/english/advisories/2006/2739 FrSIRT Advisory] <br /> |
| − | + | [http://forum.joomla.org/index.php/topic,76009.0.html Forum Topic] <br /> | |
</td> | </td> | ||
| Line 863: | Line 892: | ||
</td> | </td> | ||
<td><= v1_beta </td> | <td><= v1_beta </td> | ||
| − | <td>Upgrade to latest stable version. | + | <td>Upgrade to latest stable version. [http://forge.joomla.org/sf/frs/do/viewRelease/projects.performs/frs.com_performs.com_performs_v2_beta ] </td> |
| − | <td> | + | <td> [http://secunia.com/advisories/21044/ Secunia Advisory]<br /> [http://forum.joomla.org/index.php/topic,76654.0.html Forum Topic] <br /> |
| − | + | [http://forum.joomla.org/index.php/topic,76862.0.html Forum Topic] <br /> | |
| − | + | ||
| − | + | ||
</td> | </td> | ||
<td> 2006</td> | <td> 2006</td> | ||
| Line 878: | Line 905: | ||
<td> Upgrade to latest version.<br /> | <td> Upgrade to latest version.<br /> | ||
</td> | </td> | ||
| − | <td> | + | <td> [http://forum.joomla.org/index.php?topic=174770.new#new Forum Topic] |
<br /> | <br /> | ||
| Line 896: | Line 923: | ||
</td> | </td> | ||
<td> <= 1.1.5</td> | <td> <= 1.1.5</td> | ||
| − | <td>Upgrade to latest stable version. | + | <td>Upgrade to latest stable version. [http://forge.joomla.org/sf/frs/do/viewRelease/projects.peoplebook/frs.component.component_1_1_6_0] </td> |
| − | <td> | + | <td>[http://forge.joomla.org/sf/go/artf5410?nav=1 Joomla Forge] </td> |
| − | + | ||
<td> 2006</td> | <td> 2006</td> | ||
</tr> | </tr> | ||
| Line 913: | Line 939: | ||
</td> | </td> | ||
<td> <= 0.8</td> | <td> <= 0.8</td> | ||
| − | <td> Author suggest manually patching. | + | <td> Author suggest manually patching. [http://www.princeclan.org/] </td> |
| − | <td> See | + | <td> See [http://www.princeclan.org/ this site]. </td> |
<td> 2006</td> | <td> 2006</td> | ||
</tr> | </tr> | ||
| Line 929: | Line 955: | ||
</td> | </td> | ||
<td> <= 1.22.07</td> | <td> <= 1.22.07</td> | ||
| − | <td>Upgrade to latest stable version. | + | <td>Upgrade to latest stable version. [http://www.joomlaxt.com/index.php?option=com_remository&Itemid=77&func=fileinfo&id=9] </td> |
| − | <td> | + | <td> [http://secunia.com/advisories/21068/ Secunia Advisory] <br /> |
| − | + | [http://forum.joomla.org/index.php/topic,77975.0.html Forum Topic] <br /> | |
| − | + | [http://secunia.com/advisories/21068/ Secunia Advisory] | |
</td> | </td> | ||
<td>2006</td> | <td>2006</td> | ||
| Line 949: | Line 975: | ||
<td> <= 1.11.3</td> | <td> <= 1.11.3</td> | ||
| − | <td>Upgrade to latest stable version. | + | <td>Upgrade to latest stable version. [http://forge.joomla.org/sf/go/projects.rsgallery2/frs.rsg2_alpha_builds.rsg2_1_11_4]</td> |
| − | <td> | + | <td> [http://forum.joomla.org/index.php/topic,73453.0.html Forum Topic] |
</td> | </td> | ||
<td> 06</td> | <td> 06</td> | ||
| Line 956: | Line 982: | ||
</tr> | </tr> | ||
<tr> | <tr> | ||
| − | <td><b>RWCards | + | <td><b>RWCards</b></td> |
<td> < 2.4.4<br /> | <td> < 2.4.4<br /> | ||
</td> | </td> | ||
<td> Upgrade to latest stable version.</td> | <td> Upgrade to latest stable version.</td> | ||
| − | <td><b> | + | <td><b> [http://forum.joomla.org/index.php/topic,154792.msg749006.html#msg749006 Forum Topic] </b></td> |
<td> 26 June 2007<br /> | <td> 26 June 2007<br /> | ||
</td> | </td> | ||
| Line 972: | Line 998: | ||
<td> <= 3.0.5</td> | <td> <= 3.0.5</td> | ||
<td>Upgrade to latest stable version.</td> | <td>Upgrade to latest stable version.</td> | ||
| − | <td> | + | <td> [http://secunia.com/advisories/21260/ Secunia Advisory] <br /> |
| − | + | [http://forum.joomla.org/index.php/topic,81589.0.html Forum Topic] <br /> | |
</td> | </td> | ||
| Line 995: | Line 1,021: | ||
<td>Patch or update.<br /> | <td>Patch or update.<br /> | ||
</td> | </td> | ||
| − | <td><b> | + | <td><b> [http://forum.joomla.org/index.php/topic,226147.0.html Forum Topic] </b> |
</td> | </td> | ||
| Line 1,016: | Line 1,042: | ||
<td> Abandoned. Remove completely or use at your own risk.<br /> | <td> Abandoned. Remove completely or use at your own risk.<br /> | ||
| − | + | [http://www.simplemachines.org/community/index.php?topic=97649.0] </td> | |
<td> | <td> | ||
| − | + | [http://secunia.com/advisories/21055/ Secunia Advisory] <br /> | |
| − | + | [http://forum.joomla.org/index.php/topic,76326.0.html Forum Topic] <br /> | |
| − | + | [http://secunia.com/advisories/21055/ Secunia Advisory] <br /> | |
</td> | </td> | ||
| Line 1,036: | Line 1,062: | ||
</td> | </td> | ||
<td> All</td> | <td> All</td> | ||
| − | <td>Upgrade to latest JoomlaBoard. JoomlaBoard is compatible with SimpleBoard. | + | <td>Upgrade to latest JoomlaBoard. JoomlaBoard is compatible with SimpleBoard. [http://developer.joomla.org/sf/frs/do/viewRelease/projects.simpleboard/frs.joomlaboard_1_1.joomlaboard_1_1_2 Download here].</td> |
<td> | <td> | ||
| − | + | [http://secunia.com/advisories/20981/ Secunia Advisory] <br /> | |
| − | + | [http://secunia.com/advisories/20409/ Secunia Advisory] <br /> | |
| − | + | [http://forum.joomla.org/index.php/topic,75668.0.html Forum Topic] <br /> | |
| − | + | [http://secunia.com/advisories/20981/ Secunia Advisory] <br /> | |
</td> | </td> | ||
<td> 2006</td> | <td> 2006</td> | ||
| Line 1,060: | Line 1,086: | ||
<td> | <td> | ||
<p> | <p> | ||
| − | Versions other than 1.1RC2. Fix Available. | + | Versions other than 1.1RC2. Fix Available. [http://www.simplemachines.org/community/index.php?topic=100140.0 See this thread]. |
| − | + | ||
</p> | </p> | ||
| Line 1,069: | Line 1,094: | ||
<p> | <p> | ||
Version 1.1RC2 only. Upgrade available. <br /> | Version 1.1RC2 only. Upgrade available. <br /> | ||
| − | + | [http://www.simplemachines.org/community/index.php?topic=97649.0 See this thread.] | |
</p> | </p> | ||
</td> | </td> | ||
| − | <td> | + | <td> [http://secunia.com/advisories/21079/ Secunia Advisory] <br /> |
| − | + | [http://www.simplemachines.org/community/index.php?topic=100140.0 Simple Machines Advisory] <br /> | |
| − | + | [http://forum.joomla.org/index.php/topic,78313.0.html Forum Topic] <br /> | |
| − | + | [http://forum.joomla.org/index.php/topic,77716.0.html Forum Topic] <br /> | |
| − | + | [http://forum.joomla.org/index.php/topic,78359.0.html Forum Topic] <br /> | |
| − | + | [http://forum.joomla.org/index.php/topic,76609.0.html Forum Topic] <br /> | |
| − | + | [http://secunia.com/advisories/21079/ Secunia Advisory] <br /> | |
</td> | </td> | ||
<td> 2006</td> | <td> 2006</td> | ||
| Line 1,101: | Line 1,126: | ||
<td><br /> | <td><br /> | ||
<p> | <p> | ||
| − | + | [http://forum.joomla.org/index.php/topic,159111.0.html Forum Topic] | |
</p> | </p> | ||
</td> | </td> | ||
| Line 1,118: | Line 1,143: | ||
</td> | </td> | ||
<td> <= 1.1.1 (?)</td> | <td> <= 1.1.1 (?)</td> | ||
| − | <td>Upgrade to latest stable version. | + | <td>Upgrade to latest stable version. [http://www.ravenswoodit.co.uk/index.php?option=com_docman&task=cat_view&gid=78&Itemid=13] </td> |
| − | <td> | + | <td> [http://forum.joomla.org/index.php/topic,81308.msg416865.html#msg416865 Forum Topic]<br /> |
| − | + | [http://secunia.com/advisories/21305/ Secunia Advisory] <br /> | |
| − | + | [http://forum.joomla.org/index.php/topic,81308.msg416865.html#msg416865 Forum Topic] <br /> | |
| − | + | ||
</td> | </td> | ||
<td> June 2007</td> | <td> June 2007</td> | ||
| Line 1,129: | Line 1,153: | ||
<td><b>VirtueMart</b></td> | <td><b>VirtueMart</b></td> | ||
| − | <td> <= 1.0. | + | <td> <= 1.0.13a</td> |
| − | <td>Upgrade to version 1. | + | <td>Upgrade to version >= 1.0.14. Available [http://virtuemart.net/index.php?option=com_content&task=view&id=54&Itemid=147 here]. </td> |
| − | <td> | + | <td> [http://virtuemart.net/index.php?option=com_content&task=view&id=275&Itemid=127 Security Bulletin] </td> |
| − | <td> | + | <td>January 2008</td> |
</tr> | </tr> | ||
<tr> | <tr> | ||
| Line 1,140: | Line 1,164: | ||
<td> 2.1.1</td> | <td> 2.1.1</td> | ||
<td> Upgrade to latest stable version.</td> | <td> Upgrade to latest stable version.</td> | ||
| − | <td> | + | <td>[http://forum.joomla.org/index.php/topic,146478.msg737784.html#msg737784 Forum Topic]</td> |
<td> 26 June 2007<br /> | <td> 26 June 2007<br /> | ||
| Line 1,149: | Line 1,173: | ||
<td><= 2.5.1 RC4</td> | <td><= 2.5.1 RC4</td> | ||
| − | <td> | + | <td> [http://www.zoomfactory.org/index.php?option=com_remository&Itemid=61&func=select&id=1 Upgrade to latest stable version].</td> |
| − | + | <td> [http://www.frsirt.com/english/advisories/2007/1353 FrSIRT Advisory] <br /> | |
| − | <td> | + | [http://forum.joomla.org/index.php/topic,160119.0.html Forum Topic] </td> |
| − | + | ||
<td> 2006</td> | <td> 2006</td> | ||
</tr> | </tr> | ||
| − | + | <tr> | |
| + | <td> <b>BF Survey Pro<br />BF Survey Basic<br />BF Quiz</b></td> | ||
| + | <td><=1.2.5<br /><=1.0<br /><=1.1.1</td> | ||
| + | <td>[http://www.tamlyncreative.com.au/software/index.php/downloads.html Upgrade to latest versions]</td> | ||
| + | <td>[http://forum.joomla.org/viewtopic.php?f=431&t=336055&start=0 Forum Post]<br />[http://www.tamlyncreative.com.au/software/forum/index.php?topic=357.0 Developer's Forum Post]</td> | ||
| + | <td>September, 2009</td> | ||
| + | </tr> | ||
| + | <tr> | ||
| + | <td> <b>Photoblog (com_photoblog)</td> | ||
| + | <td>Unknown</td> | ||
| + | <td>Unknown</td> | ||
| + | <td>[http://www.securityfocus.com/bid/36809/info Security Focus Advisory]</td> | ||
| + | <td>October 26, 2009</td> | ||
| + | </tr> | ||
</table> | </table> | ||
| + | |||
| + | [[Category:Security]] | ||
Latest revision as of 13:41, 8 October 2011
 |
This article or section is in the process of an expansion or major restructuring. You are welcome to assist in its construction by editing it as well. If this article or section has not been edited in several days, please remove this template. This article was last edited by Mandville (talk| contribs) 19 months ago. (Purge) |
For a more recent list please see Vulnerable_Extensions_List_oct
| Name | Versions | Solution | References | Updated |
|---|---|---|---|---|
|
A6MamboCredits com_a6mambocredits |
All | Abandoned. Remove completely or use at your own risk. | Secunia Advisory Forum Topic |
2006 |
|
A6MamboHelpDesk com_a6mambohelpdesk |
All | Abandoned. Remove completely or use at your own risk. | 2006 | |
|
Advanced Poll com_advancedpoll (?) |
<= 2.2.0 |
Abandoned. Remove completely or use at your own risk. |
Forum Topic | 2006 |
| Adobe Acrobat Reader (Not a Joomla! extension, but worth noting.) |
<= 7.0.8 | Upgrade to latest stable version. | Adobe Advisory | 2006 |
| Akocomment | All | SQL Injection with PHP magic_quotes OFF. No upgrade path yet. Fix: Turn PHP magic_quotes ON |
Forum Topic |
June 30, 2006 |
| Article | <= 1.1 |
Upgrade to latest stable version. | milwOrm Advisory Forum Topic |
26 June 2007 |
|
ArtLinks com_artlinks |
All | Abandoned. Remove completely or use at your own risk. | Forum Topic | 2006 |
| AutoStand | <= 1.1 |
No further information at this time. |
milwOrm Advisory
|
26 June 2007 |
|
Bayesian Naive Filter com_bayesiannaivefilter |
<= 1.1 | No Fix Available. Disable or remove until a fix is available. | Forum Topic | 2006 |
|
Bible Study com_biblestudy |
<= 6.0.7b and below | Fix Available. SQL Insertion attack | http://joomlacode.org/gf/project/biblestudy/ | 2008 |
|
BigApe Backup com_babackup |
All | A patch is available from the developer. See this post. | Secunia Advisory Forum Topic |
2006 |
|
BSQ Site Stats com_bsqsitestats |
<= 2.2.1 | Upgrade to latest stable version. |
Forum Topic Secunia Advisory |
2006 |
| Car Manager |
<= 1.1 |
No further information at this time. | Forum Topic | 26 June 2007 |
|
Classifieds com_classifieds |
<= 1.3 | Upgrade to latest stable version. | Forum Topic | 2006 |
|
Colophon com_colophon |
<= 1.2 | Upgrade to latest stable version. | Secunia Advisory Forum Topic |
2006 |
|
Community Builder com_profiler |
<= 1.0.0 |
Upgrade to latest stable version. |
Jomopolis Topic Forum Topic |
2006 |
|
DS-Syndicate com_ds-syndicate |
All versions? |
SQL injection vulnerability. |
Nov. 27, 2008 | |
|
Events com_events |
<= 1.3 Beta | Upgrade to latest stable version. | Forum Topic | 2006 |
| Expose Flash Gallery | RC4 | Download patch |
Forum Topic | 20 July 2007 |
|
ExtCalendar com_extcalendar |
<= 0.9.1 | Upgrade to version 0.9.2. Seethis post for details. Also check the new forked project, JCal. | Secunia Advisory Forum Topic |
2006 |
|
Facile Forms com_facileforms |
<= 1.4.6 | Upgrade to latest stable version. | Forum Topic | 2006 |
|
Galleria com_galleria |
All | Abandoned. Remove completely or use at your own risk. | NVD Advisory Forum Topic |
2006 |
|
Gmaps com_gmaps |
<=1.01 | Upgrade to the latest version, which can be downloaded here |
Security Focus Advisory |
6 August 2007 |
|
Hash Cash com_hashcash |
All | Abandoned. Remove completely or use at your own risk. | Secunia Advisory |
2006 |
|
Hot Property com_hotproperties (?) |
<= 0.97 | Upgrade to latest stable version. | No references available at this time. | 2006 |
|
JCE com_jce |
<= 1.0.4 | Apply patch, download it here, or use latest stable version. | 2006 | |
|
JoomlaPack com_jpack |
1.0.4a2 RE | Upgrade to latest stable version. | 2006 | |
|
JoomlaBoard com_joomlaboard |
<= 1.1.1 |
Upgrade to latest stable version. |
Secunia Advisory |
2006 |
|
JoomlaLib com_joomlalib |
<= 1.2.1 | Upgrade to latest stable version. | Forum Topic | 2006 |
|
JD-WordPress com_jd-wp |
<= 2.0-1.0 RC2 | Patch Available. See this post. |
Forum Topic | 2006 |
|
JD-Wiki com_jd-wiki |
All |
Abandoned project. |
6 July 2007 | |
|
JIM 1.0.1. (PMS) com_jim |
1.0.1 |
Upgrade to latest stable version. The developer fixed security issues but didn't create a higher version number. | Secunia Advisory | 2006 |
| joomSEF (ARTIO) | <=2.2.1 | Upgrade to latest stable version. | Forum Topic | 27 Oct 2007 |
|
jPack com_jpack |
< 1.0.4-b1 | Upgrade to latest stable version. | Forum Topic | 26 June 2007 |
|
Link Directory com_linkdirectory |
All |
Remove. Abandoned project. |
No references. | 2006 |
|
Letterman mod_letterman |
<= 1.2.4 | Upgrade to latest stable version. [1] | Forum Topic | May 2007 |
|
LMO com_lmo |
<= 1.0b2 | Upgrade to latest stable version. [2] | FrSIRT Advisory Forum Topic |
2006 |
|
LoudMouth com_loudmouth |
<= 4.0j | Upgrade to version 4.1 then apply Security Patch 1. Download here. | Forum Topic MamboExchange Advisory |
2006 |
|
MamCom (?) com_trade |
All |
Abandoned. Remove completely or use at your own risk. |
*Unconfirmed* | 2006 |
|
MambelFish 1.x com_mambelfish |
<= 1.x | Upgrade to 1.5 (or to Joom!Fish) Download Mambelfish Download Joom!Fish |
Secunia Advisory | 2006 |
|
Mambo Gallery Manager com_mgm |
All | Abandoned. Remove completely or use at your own risk. | Forum Topic FrSIRT Advisory |
2006 |
|
MiniBB com_minibb |
<= 1.5a | Abandoned. Remove completely or use at your own risk. | 2006 | |
|
Mos Tree com_mtree |
<= 1.5.8 | Upgrade to latest stable version. [3] | Forum Topic | 2006 |
|
MosMedia com_mosmedia |
<= 1.0.8 | Temporary Fix Available. See this thread for details. | Forum Topic | 2006 |
|
MoSpray com_mospray |
<= 1.8 RC1 | Abandoned. Remove completely or use at your own risk. | Forum Topic | 2006 |
|
Multibanners com_multibanners * Note: Not the same as the Multibanners Module. |
All |
Abandoned. Remove completely or use at your own risk. | Secunia Advisory |
2006 |
|
OpenSEF com_sef |
<= 2.0.0 RC5 Unpatched | Download patch | Forum Topic | 2006 |
|
PC Cook Book com_pccookbook |
<= 1.3.1 | No Fix Available. Disable or remove. | FrSIRT Advisory |
2006 |
|
Per Forms com_performs |
<= v1_beta | Upgrade to latest stable version. [4] | Secunia Advisory Forum Topic |
2006 |
| Phil-A-Form | < 1.2 |
Upgrade to latest version. |
Forum Topic
|
May 2007 |
|
People Book com_peoplebook |
<= 1.1.5 | Upgrade to latest stable version. [5] | Joomla Forge | 2006 |
|
Prince Clan Chess com_pcchess |
<= 0.8 | Author suggest manually patching. [6] | See this site. | 2006 |
|
PollXT com_pollxt |
<= 1.22.07 | Upgrade to latest stable version. [7] | Secunia Advisory |
2006 |
|
RS Gallery2 com_rsgallery2 |
<= 1.11.3 | Upgrade to latest stable version. [8] | Forum Topic | 06 |
| RWCards | < 2.4.4 |
Upgrade to latest stable version. | Forum Topic | 26 June 2007 |
| Security Images com_securityimages |
<= 3.0.5 | Upgrade to latest stable version. | Secunia Advisory |
June 2007 |
| SEF404x com_sef |
All | No Fix Available. Remove completely or use at your own risk. | No references. |
2006 |
| sh404SEF | 1.2.4 t, u, or w | Patch or update. |
Forum Topic | 23 Oct, 2007 |
|
Site Map com_sitemap |
All |
Abandoned. Remove completely or use at your own risk. [9] |
2006 | |
|
SimpleBoard com_simpleboard |
All | Upgrade to latest JoomlaBoard. JoomlaBoard is compatible with SimpleBoard. Download here. |
Secunia Advisory |
2006 |
|
SMF Bridge com_smf |
<= 1.1.4 |
Versions other than 1.1RC2. Fix Available. See this thread.
Version 1.1RC2 only. Upgrade available. |
Secunia Advisory Simple Machines Advisory |
2006 |
|
TaskHopper com_thopper |
<= 1.1 |
Upgrade to latest version. |
2006 | |
|
User Home Pages 1 and 2 com_uhp and com_uhp2 |
<= 1.1.1 (?) | Upgrade to latest stable version. [10] | Forum TopicSecunia Advisory |
June 2007 |
| VirtueMart | <= 1.0.13a | Upgrade to version >= 1.0.14. Available here. | Security Bulletin | January 2008 |
| WordPress (Not a Joomla! extension, but worth noting.) |
2.1.1 | Upgrade to latest stable version. | Forum Topic | 26 June 2007 |
| zOOm Media Gallery | <= 2.5.1 RC4 | Upgrade to latest stable version. | FrSIRT Advisory Forum Topic |
2006 |
| BF Survey Pro BF Survey Basic BF Quiz |
<=1.2.5 <=1.0 <=1.1.1 |
Upgrade to latest versions | Forum Post Developer's Forum Post |
September, 2009 |
| Photoblog (com_photoblog) | Unknown | Unknown | Security Focus Advisory | October 26, 2009 |
