Database Backup Download Vulnerability in Joomla!

Joomla! is an open source content management system CMS. A database backup download vulnerability exists in joomla version 1.6.x. The vulnerability stems from the program's failure to adequately filter user-submitted input, which can be exploited by an attacker to download database backups to...

Hardcoded credentials

Joomla! 1.6.x before 1.6.2 does not prevent page rendering inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...

Joomla 1.6.x Administrator PHP Code Execution

Requirements require 'msf/core' Class declaration class Metasploit3 'Joomla 1.6. Administrator PHP Code Execution', 'Description' = %q This module can be used to gain a remote shell to a Joomla! 1.6. install when administrator credentials are known. This is acheived by uploading a malicious...