Date:  Tue, 19 Sep 2006 11:20:52 +0100
From:  "Taco Scargo" <taco (at mark) scargo.nl>
Subject:  [coba-e:07069] Re: Odd events for September 19, 2006
To:  coba-e (at mark) bluequartz.org
Message-Id:  <20060919102052.M87021 (at mark) scargo.nl>
In-Reply-To:  <053a01c6dbcf$47656b60$02002c0a@WebHoster>
References:  <053a01c6dbcf$47656b60$02002c0a@WebHoster>
X-Mail-Count: 07069

Hello Blues,

> After we looked at the site in more detail we found it was a Joomla site
> running version 1.08 not the latest - I wonder if there is either 
> some bad code creeping in or a vulnerability being exploited.

Taken from the Joomla.org site/forum:

http://forum.joomla.org/index.php/topic,89865.0.html

Joomla! 1.0.11 [ Sunbow ] is now available as of Monday 28th August 2006 24:00
UTC for download here. and is being designated a Critical Security Release.
All existing Joomla! users MUST UPGRADE to this version, due to several High
Level vulnerabilities that affect ALL Previous versions of Joomla!

1.0.11 contains the following critical security fixes:

    * 04 High Level Security Fixes
    * 04 Medium Level Security Fixes
    * 18 Low Level security
    * 25 General bug fixes

If you are using ANY previous version of Joomla!, you need to upgrade to
1.0.11 as soon as possible.


.... so yes, I think you have a problem...

Taco