An urgent, high-level security threat has been identified in Joomla 1.5. This exploit allows someone to gain full access to your joomla web site with little or no knowledge. The official announcement can be found below

The Joomla! community is pleased to announce the immediate availability of Joomla! 1.5.6 [Vusani]. This is a quick turnaround security release to address a high level security issue and it is recommended all users upgrade immediately.

For more information about this exploit, visit the

Instructions

* New installation
* Upgrade from an existing Joomla! 1.5 version
* Migration from Joomla! 1.0.x
* See below for manual installation instructions

Download the Joomla 1.5.6 full package now

Release Notes

* SECURITY [HIGH] Fixed security hole in reset logic to check for proper token length.

All users of Joomla 1.5 should IMMEDIATELY upgrade to 1.5.6 or apply a simple patch.

Related Articles

• September 2, 2008 -- Ramadan Mubarak
• September 9, 2008 -- Quotes of the Day
• January 22, 2008 -- Prevention of Electronic Crimes Ordinance, 2007 [ Complete]
• June 20, 2008 -- Upcoming Release : Urdu phpBB3 RC2 will be released soon
• February 21, 2008 -- Importing Methods from an unrelated Class in PHP5
• January 6, 2008 -- SMSS.exe / LSASS.exe / KILLER.exe / Funny UST Scandal.avi.exe / AutoIt v3 Script 3,2,8,1
• November 2, 2008 -- ساغر صدیقی مرحوم۔ لاہور کا شاعر بے نوا
• April 11, 2009 -- Windows XP support runs out next week
• December 22, 2008 -- Almushaf Quran Font
• September 1, 2008 -- (Ramadan) Ramazan ul Mubarak

Tags: