security problem from mambo 4.2.5.3 in joomla as well?

[nordlücht]

Hi,
there's a report of a security problem with mambo 4.2.5.3 if register_globals is off:
http://www.derkeiler.com/Mailing-Lis...5-11/0535.html

Could somebody please tell me whether this hole exists in joomla 1.0.3 as well?

[heyjoe]

Originally Posted by nordlücht

Could somebody please tell me whether this hole exists in joomla 1.0.3 as well?

Yep it is, It depends on the version PhP you're server is using.
See:
http://www.joomlaya.com/content/view/190/1/ for more information

[ChipMonk]

well, upgrad to 1.0.4 ASAP (dont assume anything)

[Baal]

I upgraded to 1.0.4 and now get "overLIB 4.10 or later required for the HideForm Plugin" every time I try to edit an article, menu item, or even login from the front end. Any ideas as to why? The overLIB files are in the includes folder but I still get the error.

[heyjoe]

I upgraded to 1.0.4 and now get "overLIB 4.10 or later required for the HideForm Plugin" every time I try to edit an article, menu item, or even login from the front end. Any ideas as to why? The overLIB files are in the includes folder but I still get the error.

I think this subject is in the wrong thread ? No ?

[loveumaryoo]

to be severe with oneself and lenient with others.-------------------------Our wow power leveling website offer Fast and Secure wow powerleveling service. WoW Power Leveling 60-70, Cheap wow power leveling 1-70. The Professional Cheap WoW Gold! Powerlevel wow gold now. WOrld of warcraft Power Leveling bloom of true love associated with this time of year!