Questions tagged [joomla]
Joomla is a free and open source content management system (CMS) for publishing content on the World Wide Web.
23 questions
0
votes
0
answers
13
views
My Joomla WebSite Phished [duplicate]
My website is wirten in Joomla. The provider turned it off saying it has been phished.
REQUIRES PHILIPPINES PROXY TO VIEW
IP Address: 178.32.141.220
Phishing Content:
hxxps://www .officinadelle11 ....
- 109
0
votes
0
answers
138
views
Website Marked as Phising by Edge [duplicate]
I handle a joomla website (https://dom-ng.eu) which is marked as unsafe by Microsoft Edge but not Chrome an others. The site is flagged with a phishing threat and i tried to fix the issue but it's not ...
1
vote
0
answers
104
views
How to know what version of extensions are used in joomla-web-site from user's point of view?
The problem is: I'm a user and I'm to find out what version of extensions(modules, plugins and components) are used on Joomla-site.
In simple cases the version is already written,like here:
...
- 123
0
votes
1
answer
195
views
Why object injection doesn't work but payload is stored along with session cookies on Joomla 2.5.11 unpatched? [closed]
I have read and understand object injection from this question. Then I wanted to test the security issue behind Joomla CMS Object injection through serialization.
TEST MACHINE
xammp 1.7.3 for ...
0
votes
2
answers
336
views
PHP Code Injection vulnerability exists even after recommended hardening
Using Burp to intercept traffic and inject code we have identified
remote code execution vulnerability in a website. After entering data
in input fields on the form and clicking submit the traffic ...
0
votes
2
answers
7k
views
Is it possible to crack Joomla hash password?
I'm a developer and suddenly I fall in a stupid situation like I need to crack a hash Joomla password which is (5aa154999c111bf7f33a1a3cadba5847) and I don't know the salt. is there any way to crack ...
- 129
1
vote
0
answers
168
views
How to forbid hackers on a Joomla website? [closed]
My Joomla website was the victim of a hacker attack recently.
Hackers had access to my server and added some PHP files and mostly modified some index.php files. THe code is unfortunately ...
- 11
0
votes
1
answer
732
views
Execution of PHP function's through HTTP GET request by hacker [duplicate]
We are continuously receiving following requests on our apache server from the hackers
?1=@ini_set(%22display_errors%22,%220%22);@set_time_limit(0);
@set_magic_quotes_runtime(0);echo%20'-%3E%7C';...
- 397
3
votes
3
answers
1k
views
Will PHP malware from my hacked website be able to infect my computer locally if downloaded?
I have site that is hacked and flagged by Google for having malware:
Some pages on this website send visitors to the following dangerous websites: freshmodel.pw.
I made a backup of everything ...
- 131
2
votes
0
answers
2k
views
SQLMap Strange Dump Result
Using SQLMap in this way:
sqlmap -u "xxxxx" --dbms=MySql --dbs --user-agent="Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0" -D xxxxx -T "#__xxxxx" --columns
I am obtaining ...
- 245
9
votes
5
answers
11k
views
How can a PHP file be added over and over to my hacked site?
I'm on a shared hosting plan (I know, I know) on GoDaddy and all the files in it have been hacked. There are multiple sites in the plan, each of them has a folder. The folders and sub-folders of each ...
- 191
4
votes
2
answers
673
views
How to secure store sessions values in webapps?
EDIT: I changed the title of this post from "How to manage sessions in webapps?" to "How to secure store sessions values in webapps?" as it might have been misleading
In the recent months I happened ...
- 183
1
vote
1
answer
1k
views
Why does error-based SQL injection works only with certan fields?
I'm currently investigating the latest vulnerability affecting Joomla CMS.
You can find here a description of the vulnerability, however my question is merely on error-based SQL injections and is ...
- 19.4k
2
votes
2
answers
344
views
Log shows many hits to non existing content - hacking?
I have a website with Joomla and 404shSEF installed. The component logs all 404 requests and the log is really interesting. The site is getting requests on components and also a file called this: "...
- 123
2
votes
2
answers
782
views
Hack: anymonous URL on my Joomla Website[Resolve] [closed]
My website has been hacked again. There are many foreign URLs such as here.
I've checked the database and there is nothing strange in my database. Does anyone know what kind of hack attack is like ...
0
votes
1
answer
525
views
Joomla Linux Permissions
I installed Joomla 3 to /var/www/html directory in Cent OS 6 server. Currently /var/www/html is owned by apache:apache.
What is the recommended permissions for Joomla installation on Linux in ...
- 794
1
vote
0
answers
1k
views
Akamai or Incapsula (or other) for CDN with DDoS Protection? [closed]
One of our clients is launching a new site and I've been tasked with making a short overview of the advantages/disadvantages of Akamai, Incapsula or other CDN providers who are strong with DDoS ...
- 203
0
votes
2
answers
713
views
NGO Joomla! site: Infected with malware? JavaScript injection?
Please help us with this NGO site running Joomla! 1.5.
They can't pay a security professional right now, so maybe you guys can help isolate the problem?
If you go to http://casatrespatios.org you ...
1
vote
1
answer
671
views
Installing Joomla with nobody:nobody user/group (CentOS/cPanel)
If you are installing Joomla via cPanel's File Manager to your mywebsite.com (user mywebsite) account, you will upload the package to your server and extract the archive. All files will have the user ...
- 111
-1
votes
2
answers
293
views
My VPS has been shut down now again for the second time for TOS violations, and I really need some help. [closed]
My VPS has been shut down now again for the second time for TOS violations (email spam), and I really need some help. I have been battling with my server being attacked for over a year now. Most of my ...
- 111
1
vote
5
answers
3k
views
Site backdoor & eval()
I'm running a Joomla 1.7 site which was hacked today. Below script did the hack.
eval((base64_decode("...
- 123
1
vote
1
answer
6k
views
my site with joomla 1.5.14 got defaced and I'd like to know how he did it and stop it [closed]
I am supposed to manage the content of a site and it got defaced.
The site is hosted on a Linux server running Apache.
Apache version: 2.2.13
Linux version is Debian 4.0(I think I don't really have ...
- 113
0
votes
3
answers
1k
views
Viewing the configuration.php
My understanding is that you should never host your configuration.php file within the public_html directory (I am specifically referring to Joomla, but I imagine this is a cross-platform scenario).
...
- 2,167