JOOMLA EMAIL OBFUSCATOR UPDATE

JOOMLA EMAIL OBFUSCATOR UPDATE

Update the software to a non-vulnerable version. If this signature is detected, an incident is generated in the Alert Logic console. The Network-Based Intrusion Detection System (IDS) has been updated with the new signatures for this exploit when detected via Alert Logic Threat Manager™. Alert Logic CoverageĪlert Logic® has evaluated its customer base for exposure to the exploit and has developed signatures for mitigating the threat depending on the security service in place. This functionality is accessible from outside the Joomla site by unauthorized users and allows the arbitrary uploading and renaming of files leading to RCE with PHP.

The tinybrowser of TinyMCE is an embedded Flash player application that handles the upload and editing of files. The Joomla 1.5.12 installation comes with the TinyMCE editor plugin, providing a fully featured editor. The attacker must be able to contact the victim host with crafted packets. The attacker accesses the uploaded PHP file in /images/stories/ and achieves PHP RCE on the server.The attacker sends an HTTP POST request to edit.php with rename action to change the file extension to php.Brought to you by the award-winning digital agency Brightlabs. The attacker sends an HTTP POST request to upload_file.php with the obfuscation code and PHP file with an acceptable file extension. Trying to obfuscate an email address for your website If you are a web designer, web developer or content author and you want to hide your address on your website so spambots cant find it, use this tool to obfuscate your email address and paste the generated code into your web page.The attacker sends an unauthorized HTTP GET request directly to the Joomla Tinybrowser upload.php to retrieve the obfuscation code.This functionality is accessible from outside the Joomla site by unauthorized users and allows the arbitrary uploading and renaming of files leading to remote code execution with PHP.

Joomla email obfuscator