Joomla SQL-Injection Flaw Affects Millions of Websites (trustwave.com)

Posted by Soulskill on Sunday October 25, 2015 @02:31AM from the still-a-thing-in-2015 dept.

An anonymous reader writes: Joomla has just issued a patch that fixes a SQL-injection vulnerability discovered by a researcher at Trustwave SpiderLabs. The flaw allowed malicious users to extract a browser cookie assigned to a site's administrator, giving them access to restricted parts of the server. The flaw first appeared in Joomla 3.2, released in November, 2013. An estimated 2.8 million websites rely on Joomla. The Joomla team and the researcher who found the flaw recommend an immediate update to version 3.4.5.

1 of 120 comments (clear)

Min score:

Reason:

Sort:

Today I Learned by JustAnotherOldGuy · 2015-10-25 03:28 · Score: 1, Funny

Today I learned that I write more secure code than all of the fucking coders at Joomla put together.
A decent sized company with loads of resources, lots of code reviews, using Agile, Scrum, Waterfall, SuckMyPecker, and (supposedly) staffed with experienced programmers, and they STILL fuck it up.

--
Just cruising through this digital world at 33 1/3 rpm...