Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 507
Alerts This Week
Warning Icon 1 507

Joomla 1.5.13 Moderate XSS And Severe File Upload Risks Advisory

Calendar Jul 23, 2009 • User Avatar Anthony Pell
1 min read
General Esm H446
Topics%20covered

Topics Covered

security advisory XSS moderate severity file upload Joomla 1.5.13 update
The Joomla developers have announced the release of version 1.5.13 of their content management system (CMS). The security update addresses a critical vulnerability in the Tiny browser included with the TinyMCE 3.0 editor that could allow files to be uploaded or removed without a user needing to be logged in. Version 1.5.12 is affected. Additional details, however, have not been provided. A moderate cross site scripting (XSS) issue has also been fixed that could cause some files to miss the JEXEC check, causing scripts to expose internal path information to the host. All 1.5.x versions up to and including 1.5.12 are affected. The 1.5.13 update addresses both of the issues.

The link for this article located at H Security is no longer available.