[20110304] - Core - Unauthorised Access

• Project: Joomla!
• SubProject: All
• Severity: Low
• Versions: 1.6.0
• Exploit type: Unauthorised Access
• Reported Date: 2011-February-25
• Fixed Date: 2011-March-07

Description

Inadequate control of which files can be edited by authenticated users.

Affected Installs

Joomla! version 1.6.0.

Solution

Upgrade to the latest Joomla! version (1.6.1 or later)

Reported by Jeff Channell

Contact

The JSST at the Joomla! Security Center.