Menu

[20110402] – Core – Information Disclosure

April 15th, 2011

Project: Joomla! SubProject: All Severity: Low Versions: 1.6.1 and 1.6.0 Exploit type: Information Disclosure Reported Date: 2011-March-28 Fixed Date: 2011-April-14 Description Inadequate error checking causes information disclosure. Affected Installs Joomla! version 1.6.1 and 1.6.0 versions Solution Upgrade to the latest Joomla! version (1.6.2 or later) Reported by YGN Ethical Hacker Group Contact The JSST at…

[20110404] – Core – XSS Vulnerabilities

April 15th, 2011

Project: Joomla! SubProject: All Severity: Low Versions: 1.6.1 and 1.6.0 Exploit type: XSS Vulnerabilities Reported Date: 2011-April-06 Fixed Date: 2011-April-14 Description Unescaped values in administrative modal windows causes potential XSS vulnerabilities. Affected Installs Joomla! version 1.6.1 and 1.6.0 versions Solution Upgrade to the latest Joomla! version (1.6.2 or later) Reported by Klas Berlič Contact The…

[20110408] – Core – SQL Injection

April 15th, 2011

Project: Joomla! SubProject: All Severity: Medium Versions: 1.6.1 and 1.6.0 Exploit type: SQL Injection Reported Date: 2011-March-12 Fixed Date: 2011-April-14 Description Unescaped values in query leads to SQL injection vulnerability. Affected Installs Joomla! version 1.6.1 and 1.6.0 versions Solution Upgrade to the latest Joomla! version (1.6.2 or later) Reported by anonymous. Contact The JSST at…

[20110407] – Core – Unauthorised Access

April 15th, 2011

Project: Joomla! SubProject: All Severity: Medium Versions: 1.6.1 and 1.6.0 Exploit type: Unauthorised access Reported Date: 2011-March-17 Fixed Date: 2011-April-14 Description Inadequate permission checking causes potential for unauthorised access. Affected Installs Joomla! version 1.6.1 and 1.6.0 versions Solution Upgrade to the latest Joomla! version (1.6.2 or later) Reported by Elin Waring Contact The JSST at…

IE10 Platform Preview and CSS Features for Adaptive Layouts

April 14th, 2011

The first platform preview of IE10 contains many new CSS3 features all developed as implementations of evolving Web standards. In this post, we’ll look at three of those CSS features—CSS3 Grid Layout, Flexible Box Layout, and Multi-column Layout. CSS Grid Layout and Flexible Box Layout both help developers create layouts for complex Web applications and…

April 2011 Cumulative Security Update for Internet Explorer Now Available

April 13th, 2011

The April 2011 Cumulative Security Update for Internet Explorer is now available via Windows Update. This security update resolves four privately reported vulnerabilities and one publicly disclosed a vulnerability in Internet Explorer. This security update is rated Critical for Internet Explorer 6, Internet Explorer 7, and Internet Explorer 8 on Windows clients; and Moderate for…

New Channels for Firefox Rapid Releases

April 13th, 2011

Following the amazing release of Firefox 4, Mozilla Firefox is moving to a rapid release development cycle to deliver new features, performance enhancements, security updates and stability improvements to users faster. Until now, there were three channels to test new features in Firefox: Nightly test builds – Includes features not tested by Mozilla QA Firefox…

Building a Brand Ambassador System with Drupal

April 12th, 2011

Brands are increasingly turning to brand ambassadors to market their products. Ambassadors are individuals with credibility in a given area who are hired by a brand to introduce consumers to a given product and educate them about its advantages. Liquor companies, for example, often hire bartenders as brand ambassadors. The bartenders / brand ambassadors then…

Firefox Live: Trekking with Pandas, and New Adventures for Spark and Ember

April 12th, 2011

Besides sharing awesomely cute firefox (a.k.a. red panda) cubs with the world, the Firefox Live project was intended to raise awareness of the species and their endangered status. To help achieve that goal, we partnered with the Red Panda Network on a contest that asked people to submit short videos detailing a natural area they’d…

Native HTML5: First IE10 Platform Preview Available for Download

April 12th, 2011

IE10 Platform Preview 1, available for download today is the first step in delivering the next wave of progress in native HTML5 support. Websites and HTML5 run best when they run natively, on a browser optimized for the operating system on your device. We built IE9 from the ground up for HTML5 and for Windows…