The Joomla! Forum™

Congratulations Mia and congratulations,
member of the month idea inspired me to
make similar on my portals.

Ty ty

Tonie wrote: Neither Joomla nor an extension has been hacked, so this luckily has no consequence for websites running Joomla.

very nice for community
this is the best new of the day,

Hacking thru a website on a poorly written script (php, perl , asp, java) has nothing to do with a how good a filewall is. Port 80 has to pass by it and there is no way for a firewall to differentiate a legitim request from a hacking attempt. The only way to have this is to have a tool that sits be...

This morning i spoke with one officer friend at Turkish Police Dep. on joomla case. He told me that if the attacked server (as a starting point) is staying in Turkey they examine the hacked server with website personel and pick attacker to jail in a few days. If the server is at EU and USA, these co...

Thank you Team for clearing up the site, the problems and above all the worry. Each crack they find just makes us stronger. It has been more than a long day, but Joomla has survived, and will continue to not just survive but grow even stronger. Very good words iloxs. Once more we understand that th...

Now it is time to see these guys in jail. I know Turkish Police Department has an efficient impact on hackers. Most hackers are catch in 24-36 hours and put in to jail at least 2+ years. Here some evidences to go hackers. I m I have also contact phone numbers to help to reach these, i can give them ...

These idiots (who call themselves "turkish crackers") have replaced the file "helpsites-15.xlm" at  help.joomla.org.  This file is downloaded whenever the help languages file is refreshed, which does not seem to always require a user intervention. The problem is that it can't be parsed, a...

The same vulnerability is for mambo too. They hit the system from file permissions, i guess On what basic and what tests you say that? Please explain only with the information we get from this forum, the similar hacked files are used at mambo for the similar purposes. If there is a file permission ...

more like script kiddiez... definitely not a pro When i see the attackers message 1st time i looked at attackers  web site mainpage. The header is same as the hacked/replaced joomla site file. as u said for hacked files also his site has no closing tags etc... His website uses cpanel and norma...

joomla.org seems to be hacked today.


Here is the news
http://forum.joomla.org/index.php/topic,203000.0.html

These turkish idiots have replaced the file "helpsites-15.xlm" at  help.joomla.org. Are you racist Mikey? Why do you use a bad adjective with a Nation name? Just in case someone uses a web-based tool to translate the message in a such a messy way as to convey the meaning that you suggest, I ch...

lets be patient, waiting any info from joomla developer.... and keep monitoring this threat .....  I am trying to understand the weak parts cuz i have some joomla sites and have to take action to keep them. I need to learn if joomla servers are behind corporate hardware firewalls or not. Which...

Joomla Help Site hacked. http://help.joomla.org/media/index.html dev.joomla.org is suffering from the same problem, seems it's a different hacker though m Official Joomla is on different servers and they are all standalone installations, I think the safest joomla site  is forum.joomla.org beca...

FYI, internet records about this cracker show that a variety of sites/servers have been hit. From simple Microsoft Frontpage to Joomla, passing by Mambo, phpNuke, Wordpress, standalone forums, etc. so are you suggesting that the exploit may be on a server level, and not neccessarily the joomla core...

Looks like cracking happens to the best of us You can never be safe enough, I guess the best solution is to always keep fully updated backups! This is one of the best ideas around. Always take stable backups of the system. But todays hack is done to file systems instead of joomla database. So check...

mmikeyy wrote:These turkish idiots have replaced the file "helpsites-15.xlm" at  help.joomla.org. 

Are you racist Mikey?
Why do you use a bad adjective with a Nation name?

korzinko wrote:I found,that http://www.joomla.org was already hacked at 11.08.2007.Do you know somethig about ? 

I have heard that(gossips) but i have not seen any messages at official site.

There are known issues for vulnerabilities from file permissions if this is the case even joomla 1,5 is in danger too.

I saw this new hack too
I do not became sure that this is a
joomla core attacks, i am no going to check if mambo is
vulnerable too. I guess mambo is in danger too.

The Hackers of

http://help.joomla.org

found the hole at file permissions, i guess

I do not want to disturb anyone but i guess this is a kind of
file permission hack or hack from a hole of webserver software,
a hack that probably applies on mambo too.

Lets have some cold joke



"Hey folks!
Well,
joomal.org has never been hacked today."


We are under wrong thread title . 


Sorry, too bad joke   

sonvurus  means latest impact or latest hit in English but i want to learn that why hacker has choosen joomla official site to hack? Many [edit mod] people earn money from joomla. Why didn"t he/she choosed [edit mod]joomla made sites instead of joomla official site????????????? [Moderator note;...

i looked at the image file they have put, it had the same name as joomla image name at images directory. The output under image was normal joomla message from the configuration file. It seemed to be seen as attack to webserver files images directory rather than file system including root directory. ...

I'm posting this to gauge reaction from the community on the subject of 'bumping' (reposting a query to keep it visible). I recently had my wrist slapped for bumping a query that I'd received no replies to. First I apologise for that, until then I didnt even know what bumping was. The way I see it,...

Thanks for forwarding LorenzoG,
rsgallery2 does not have that bug now.

What is the bug about the page?