Questions tagged [joomla]

Joomla is a free and open source content management system (CMS) for publishing content on the World Wide Web.

Filter by
Sorted by
Tagged with
0
votes
0answers
11 views

My Joomla WebSite Phished [duplicate]

My website is wirten in Joomla. The provider turned it off saying it has been phished. REQUIRES PHILIPPINES PROXY TO VIEW IP Address: 178.32.141.220 Phishing Content: hxxps://www .officinadelle11 ....
0
votes
0answers
22 views

Website Marked as Phising by Edge [duplicate]

I handle a joomla website (https://dom-ng.eu) which is marked as unsafe by Microsoft Edge but not Chrome an others. The site is flagged with a phishing threat and i tried to fix the issue but it's not ...
1
vote
0answers
34 views

How to know what version of extensions are used in joomla-web-site from user's point of view?

The problem is: I'm a user and I'm to find out what version of extensions(modules, plugins and components) are used on Joomla-site. In simple cases the version is already written,like here: ...
0
votes
1answer
71 views

Why object injection doesn't work but payload is stored along with session cookies on Joomla 2.5.11 unpatched? [closed]

I have read and understand object injection from this question. Then I wanted to test the security issue behind Joomla CMS Object injection through serialization. TEST MACHINE xammp 1.7.3 for ...
0
votes
2answers
106 views

PHP Code Injection vulnerability exists even after recommended hardening

Using Burp to intercept traffic and inject code we have identified remote code execution vulnerability in a website. After entering data in input fields on the form and clicking submit the traffic ...
0
votes
2answers
2k views

Is it possible to crack Joomla hash password?

I'm a developer and suddenly I fall in a stupid situation like I need to crack a hash Joomla password which is (5aa154999c111bf7f33a1a3cadba5847) and I don't know the salt. is there any way to crack ...
1
vote
0answers
101 views

How to forbid hackers on a Joomla website? [closed]

My Joomla website was the victim of a hacker attack recently. Hackers had access to my server and added some PHP files and mostly modified some index.php files. THe code is unfortunately ...
0
votes
1answer
70 views

Does a 32 character random url count as protection? (UUID) [closed]

We are using Ohanah, an event management extension for Joomla. It had a lot of bugs, but we fixed them. But there is a very big issue! You can access: E-mail, Name, Telephone, directly in the front ...
0
votes
1answer
344 views

Execution of PHP function's through HTTP GET request by hacker [duplicate]

We are continuously receiving following requests on our apache server from the hackers ?1=@ini_set(%22display_errors%22,%220%22);@set_time_limit(0); @set_magic_quotes_runtime(0);echo%20'-%3E%7C';...
3
votes
3answers
535 views

Will PHP malware from my hacked website be able to infect my computer locally if downloaded?

I have site that is hacked and flagged by Google for having malware: Some pages on this website send visitors to the following dangerous websites: freshmodel.pw. I made a backup of everything ...
2
votes
0answers
1k views

SQLMap Strange Dump Result

Using SQLMap in this way: sqlmap -u "xxxxx" --dbms=MySql --dbs --user-agent="Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0" -D xxxxx -T "#__xxxxx" --columns I am obtaining ...
8
votes
5answers
7k views

How can a PHP file be added over and over to my hacked site?

I'm on a shared hosting plan (I know, I know) on GoDaddy and all the files in it have been hacked. There are multiple sites in the plan, each of them has a folder. The folders and sub-folders of each ...
3
votes
2answers
308 views

How to secure store sessions values in webapps?

EDIT: I changed the title of this post from "How to manage sessions in webapps?" to "How to secure store sessions values in webapps?" as it might have been misleading In the recent months I happened ...
1
vote
1answer
845 views

Why does error-based SQL injection works only with certan fields?

I'm currently investigating the latest vulnerability affecting Joomla CMS. You can find here a description of the vulnerability, however my question is merely on error-based SQL injections and is ...
2
votes
2answers
273 views

Log shows many hits to non existing content - hacking?

I have a website with Joomla and 404shSEF installed. The component logs all 404 requests and the log is really interesting. The site is getting requests on components and also a file called this: "...
2
votes
2answers
711 views

Hack: anymonous URL on my Joomla Website[Resolve] [closed]

My website has been hacked again. There are many foreign URLs such as here. I've checked the database and there is nothing strange in my database. Does anyone know what kind of hack attack is like ...
0
votes
1answer
448 views

Joomla Linux Permissions

I installed Joomla 3 to /var/www/html directory in Cent OS 6 server. Currently /var/www/html is owned by apache:apache. What is the recommended permissions for Joomla installation on Linux in ...
1
vote
0answers
1k views

Akamai or Incapsula (or other) for CDN with DDoS Protection? [closed]

One of our clients is launching a new site and I've been tasked with making a short overview of the advantages/disadvantages of Akamai, Incapsula or other CDN providers who are strong with DDoS ...
0
votes
2answers
634 views

NGO Joomla! site: Infected with malware? JavaScript injection?

Please help us with this NGO site running Joomla! 1.5. They can't pay a security professional right now, so maybe you guys can help isolate the problem? If you go to http://casatrespatios.org you ...
1
vote
1answer
583 views

Installing Joomla with nobody:nobody user/group (CentOS/cPanel)

If you are installing Joomla via cPanel's File Manager to your mywebsite.com (user mywebsite) account, you will upload the package to your server and extract the archive. All files will have the user ...
-1
votes
2answers
220 views

My VPS has been shut down now again for the second time for TOS violations, and I really need some help. [closed]

My VPS has been shut down now again for the second time for TOS violations (email spam), and I really need some help. I have been battling with my server being attacked for over a year now. Most of my ...
1
vote
5answers
2k views

Site backdoor & eval()

I'm running a Joomla 1.7 site which was hacked today. Below script did the hack. eval((base64_decode("...
1
vote
1answer
5k views

my site with joomla 1.5.14 got defaced and I'd like to know how he did it and stop it

I am supposed to manage the content of a site and it got defaced. The site is hosted on a Linux server running Apache. Apache version: 2.2.13 Linux version is Debian 4.0(I think I don't really have ...
0
votes
3answers
1k views

Viewing the configuration.php

My understanding is that you should never host your configuration.php file within the public_html directory (I am specifically referring to Joomla, but I imagine this is a cross-platform scenario). ...