security

Joomla Security News

Published by dev1961 on Sun, 05/30/2010 - 01:27

Project: Joomla!

SubProject: All
Severity: High
Versions: 1.5.17 and all previous 1.5 releases
Exploit type: XSS Injection
Reported Date: 2010-May-13
Fixed Date: 2010-May-28
Description
Back-end user can inject javascript in various administrator screens.

SA-CONTRIB-2010-059: Panels - Arbitrary PHP code execution

Published by dev1961 on Thu, 05/20/2010 - 13:07

Advisory ID: DRUPAL-SA-CONTRIB-2010-059

Project: Panels (third-party module)
Versions: 6.x
Date: 2010 May 19
Security risk: Critical
Exploitable from: Remote
Vulnerability: Arbitrary PHP code execution