1. Alex
  2. Bug Report
  3. Tuesday, 12 January 2010
  4.  Subscribe via email
My website which uses JoomlaComment has been hacked. :angry: Very sad experience.

The PHP files has malicious javascript appended at the end.

I found a security report: XSS vulnerability in JoomlaComment:
http://jeffchannell.com/Joomla/joomlacomment-40-beta1-multiple-xss-vulnerabilities.html

JoomlaComment is listed on the Vulnerable Extensions List:
http://docs.joomla.org/Vulnerable_Extensions_List

Has this been fixed in Beta2? Can you supply the fix to Jeff Channel for a check?
Responses (21)


There are %s replies to this question. If you want to see them you need a valid subscription.
If you have a valid subscription, please login now.
Visit store now
Powered by EasyDiscuss for Joomla!