Simple Hack Threatens Outdated Joomla Sites
Summary: A critical Joomla patch released July 31, 2013 fixes a bug that let users upload and execute arbitrary .PHP files by appending a period to the filename, affecting Joomla 2.5.13 and earlier 2.5.x plus 3.1.4 and earlier 3.x versions. Versafe, which reported the flaw to Joomla in early June, said a working exploit was already in use and that 57 percent of the thousands of phishing and malware attacks against its 30+ EMEA financial clients in the first half of 2013 were hosted on Joomla-based sites.
Why it matters: Versafe found more than 100 sites hacked with this exploit, all hosting malicious JavaScript that banking Trojans used to automate online account fraud - and tens of thousands of unsupported Joomla 1.5.x sites remain online.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026