Support

Admin Tools

#24011 Recent Joomla vulnerability

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by on Friday, 22 January 2016 17:20 CST

Tuesday, 22 December 2015 14:00 CST

user66352
In light of the recent vulnerability in Joomla, is there any additional security benefit to adding "JDatabaseDriverMysql" to the list of blocked User Agents in admin tools for end-of-life versions (1.5, 2.5) of Joomla?

Thanks.

Wednesday, 23 December 2015 02:20 CST

tampe125
Hello Peter,

the user agent used isn't something static, but it changes every time, so you can't easily ban it.
The best thing to do is to manually path your sites using the following packages:
https://docs.joomla.org/Security_hotfixes_for_Joomla_EOL_versions

After applying the patches, your site won't be vulnerable, so attackers can't exploit the vulnerability.

Davide Tampellini

Developer and Support Staff

🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Wednesday, 23 December 2015 03:11 CST

user66352
Hi Davide - Many thanks for the prompt reply.

Wednesday, 23 December 2015 03:14 CST

tampe125
You're welcome!

Davide Tampellini

Developer and Support Staff

🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Friday, 22 January 2016 17:20 CST

System Task
system
This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.
Edited by on 2016-01-22 17:20 CST

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!