News Feed Category

Joomla! Security News

    • Project: Joomla!
    • SubProject: CMS
    • Severity:Low
    • Versions: 3.7.0 through 3.8.1
    • Exploit type: Information Disclosure
    • Reported Date: 2017-May-17
    • Fixed Date: 2017-November-07
    • CVE Number:CVE-2017-16633

    Description

    A logic bug in com_fields exposed read-only information about a site's custom fields to unauthorized users.

    Affected Installs

    Joomla! CMS versions 3.7.0 through 3.8.1

    Solution

    Upgrade to version 3.8.2

    Contact

    The JSST at the Joomla! Security Centre.

    Reported By: Internal JSST audit
    • Project: Joomla!
    • SubProject: CMS
    • Severity:Medium
    • Versions: 3.2.0 through 3.8.1
    • Exploit type: 
    • Reported Date: 2017-October-31
    • Fixed Date: 2017-November-07
    • CVE Number:CVE-2017-16634

    Description

    A bug allowed third parties to bypass a user's 2-factor-authentication method.

    Affected Installs

    Joomla! CMS versions 3.2.0 through 3.8.1

    Solution

    Upgrade to version 3.8.2

    Contact

    The JSST at the Joomla! Security Centre.

    Reported By:Yarince
    • Project: Joomla!
    • SubProject: CMS
    • Severity:Medium
    • Versions: 1.5.0 through 3.8.1
    • Exploit type: Information Disclosure
    • Reported Date: 2017-October-06
    • Fixed Date: 2017-November-07
    • CVE Number:CVE-2017-14596

    Description

    Inadequate escaping in the LDAP authentication plugin can result in disclosure of username and password.

    Affected Installs

    Joomla! CMS versions 1.5.0 through 3.8.1

    Solution

    Upgrade to version 3.8.2

    Contact

    The JSST at the Joomla! Security Centre.

    Reported By:Dr. Johannes Dahse, RIPS Technologies GmbH
    • Project: Joomla!
    • SubProject: CMS
    • Severity:Low
    • Versions: 3.7.0 through 3.7.5
    • Exploit type: Information Disclosure
    • Reported Date: 2017-August-4
    • Fixed Date: 2017-September-19
    • CVE Number:CVE-2017-14595

    Description

    A logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state.

    Affected Installs

    Joomla! CMS versions 3.7.0 through 3.7.5

    Solution

    Upgrade to version 3.8.0

    Contact

    The JSST at the Joomla! Security Centre.

    Reported By:Michal Prochaczek
    • Project: Joomla!
    • SubProject: CMS
    • Severity:Medium
    • Versions: 1.5.0 through 3.7.5
    • Exploit type: Information Disclosure
    • Reported Date: 2017-July-27
    • Fixed Date: 2017-September-19
    • CVE Number:CVE-2017-14596

    Description

    Inadequate escaping in the LDAP authentication plugin can result into a disclosure of username and password.

    Affected Installs

    Joomla! CMS versions 1.5.0 through 3.7.5

    Solution

    Upgrade to version 3.8.0

    Contact

    The JSST at the Joomla! Security Centre.

    Reported By:Dr. Johannes Dahse, RIPS Technologies GmbH

URELESS

Ureless es un Gel BioDigestivo con prebióticos (inulina de agave azul) y probióticos (Bifidus bacterium Bi-07 y Lactobacillus Rhamnosus NH001).
+ información
Ureless gel biodigestivo con prebióticos

SUPPORTAN

Supportan es un suplemento alimenticio diseñado específicamente para cubrir las necesidades nutricionales de pacientes oncológicos
+ Información
Supportan sumplemento alimenticio

Fresubín

Fresubín es una Fórmula Polimérica para paciente diabético o con intolerancia a los carbohidratos. Disminuye el riesgo de desnutrición en el paciente diabético
+ Información
Fresubín para paciente diabético o intolerante a carbohidratos

Ensure

Ensure es un suplemento alimenticio completo para personas que requieren apoyo nutricional con los beneficios adicionales de los prebióticos.
+ Información
Ensure suplemento alimenticio con prebióticos

Search