[20110603] - Unauthorised Access Project: Joomla! SubProject: All Severity: Medium Versions: 1.6.3 and all earlier 1.6.x versions Exploit type: Unauthorised Access Reported Date: 2011-June-10 Fixed Date: 2011-June-27 Description Inadequate permission checking causes potential for unauthorised access. Affected Installs Joomla! version 1.6.3 and all earlier 1.6.x versions Solution Upgrade to the latest Joomla! version (1.6.4 or later) Reported by Mark Dexter Contact The JSST at the Joomla! Security Center. Read Full Article

From Joomla! Documentation Jump to: navigation, search Contents 1 Check and Report. 2 How to use this list 3 Developers - How to get yourself removed from the VEL 4 February 2010 and onwards Reported Vulnerable Extensions 5 Calc Builder 6 Cool Debate 7 8 Scriptegrator Plugin 1.5.5 9 Joomnik

From Joomla! Documentation Jump to: navigation, search Contents 1 Check and Report. 2 How to use this list 3 Developers - How to get yourself removed from the VEL 4 February 2010 and onwards Reported Vulnerable Extensions 5 Calc Builder 6 Cool Debate 7 8 Scriptegrator Plugin 1.5.5 9 Joomnik

[20110404] - Core - XSS Vulnerabilities Project: Joomla! SubProject: All Severity: Low Versions: 1.6.1 and 1.6.0 Exploit type: XSS Vulnerabilities Reported Date: 2011-April-06 Fixed Date: 2011-April-14 Description Unescaped values in administrative modal windows causes potential XSS vulnerabilities. Affected Installs Joomla! version 1.6.1 and 1.6.0 versions Solution Upgrade to the latest Joomla! version (1.6.2 or later) Reported by Klas Berlič Contact The JSST at the Joomla! Security Center. Read Full Article