Vulnerable Extensions List 0210 - Revision history

Hutchy68: removing {{tl|inuse}} template, this article has not been edited since Feb 2010 and it is showing up in actively editing category

2013-02-02T21:38:39Z

removing {{tl|inuse}} template, this article has not been edited since Feb 2010 and it is showing up in actively editing category

2010-02-03T22:06:12Z

2010-02-03T22:04:02Z

2010-02-02T22:28:22Z

2010-01-31T15:20:57Z

‎Notes

2010-01-31T15:15:20Z

2010-01-31T15:05:21Z

‎A note to developers.

2010-01-31T14:57:44Z

2010-01-31T14:56:16Z

‎Codes used

2010-01-31T14:54:25Z

‎February 2010 Reported Vulnerable Extensions

← Older revision		Revision as of 21:38, 2 February 2013
Line 1:		Line 1:
−	~~{{inuse}}~~
−
	== February 2010 Reported Vulnerable Extensions ==		== February 2010 Reported Vulnerable Extensions ==
	<startFeed />		<startFeed />

@@ Line 23: / Line 23: @@
 |style="background:red; color:white" | '''  Not Known'''
 |-
-|style="background:red; color:white" |
+|style="#cef2e0; color:black" |
 ==   [http://extensions.joomla.org/extensions/calendars-a-events/events/95 JEvent] ==
 | SQLi
 |reported Jan 29
-|style="background:red; color:white" | ''' fixes in version 1.5.3.b'''
+|style="background:#cef2e0; color:black" | ''' fixes in version 1.5.3.b'''
 |-
 |style="background:red; color:white" |

@@ Line 28: / Line 28: @@
 | SQLi
 |reported Jan 29
-|style="background:red; color:white" | '''  Not Known'''
+|style="background:red; color:white" | ''' fixes in version 1.5.3.b'''
 |-
 |style="background:red; color:white" |

@@ Line 84: / Line 84: @@
 For instructions on how to [http://forum.joomla.org/viewtopic.php?f=432&t=478030 receive the feed.]
 ----
-[[Category:Security]]
-[[Category:Security_FAQ]]
 ----

@@ Line 80: / Line 80: @@
 == Notes ==
-The RSS feed is currently sent as ONE item. This is to prevent people only parsing for example 10 items and missing half the list. We try and put the newest item to the top of the list but it is not always possible.
+We try and put the newest item to the top of the list but it is not always possible.
 List as discussed in  [[jtopic:455746]] by [http://forum.joomla.org/memberlist.php?mode=viewprofile&u=67439 PhilD] editing by [http://forum.joomla.org/memberlist.php?mode=viewprofile&u=28000 Mandville]
-Exploits under investigation are held on this [http://docs.joomla.org/Investigation_of_exploits exploit''' investigation''' list]
+For instructions on how to [http://forum.joomla.org/viewtopic.php?f=432&t=478030 receive the feed.]
 ----
 [[Category:Security]]

@@ Line 58: / Line 58: @@
 DT - Directory Traversal [http://en.wikipedia.org/wiki/Directory_traversal wikipedia]
-== [[A note to developers.]] ==
+== Developers - How to get yourself removed from the from the VEL ==
-We only pass out information that is already out there, we will not
+Resolved items will be removed after a suitable period and not on resolution
-remove anything from the list until a suitable period has passed, we will mark is as resolved or updated.
-−
-'''If your entry is on this list and you "fixed" it ages ago, tell us please.'''
 Please solve the issues and:
-''  If JED listed''
+* If JED listed
-−
 Attach the new zip file at your actual JED listing.
 Change the extension version at JED listing.
-'' If not JED listed.''
+Contact the JED by mail with a notice and ask them republish your listing.
 Inform us by PM of the link to your resolution notice on your website.
 NB '''We do not fix, we report'''

@@ Line 44: / Line 44: @@
 <endFeed />
-''This list is change protected, for updates or editing requests [http://forum.joomla.org/memberlist.php?mode=viewprofile&u=28000 Mandville] or [http://forum.joomla.org/memberlist.php?mode=viewprofile&u=87230 lafrance]
+''This list is change protected, for updates or additions [http://forum.joomla.org/memberlist.php?mode=viewprofile&u=28000 Mandville] or [http://forum.joomla.org/memberlist.php?mode=viewprofile&u=87230 lafrance]
 ''

@@ Line 50: / Line 50: @@
 == Codes used ==
-SQLi - SQL injection [[http://en.wikipedia.org/wiki/Code_injection#SQL_injection]]
+SQLi - SQL injection [http://en.wikipedia.org/wiki/Code_injection#SQL_injection wikipedia]
-LFI - Local File Inclusion [http://www.scribd.com/doc/6498408/Remote-and-Local-File-Inclusion-Explained]
-RFI - Remote file inclusion [http://en.wikipedia.org/wiki/Remote_File_Inclusion]
-DT - Directory Traversal [[http://en.wikipedia.org/wiki/Directory_traversal]]
 == [[A note to developers.]] ==

@@ Line 5: / Line 5: @@
 '''Please check with the extension publisher in case of any questions over the security of their product.'''
-Report Vulnerable extensions either in the [[jforum:432]] security topic clearly marked with the first word in the title being ''Vulnerable Report'' where the security moderators or JSST team will respond. For a guide to the codes, polease see here.
+Report Vulnerable extensions either in the [[jforum:432]] security topic clearly marked with the first word in the title being ''Vulnerable Report'' where the security moderators or JSST team will respond. For a guide to the [http://docs.joomla.org/Vulnerable_Extensions_List_0210#Codes_used codes]
 [http://docs.joomla.org/Vulnerable_Extensions_List Previous Reports]