Page 1 of 1

Shouls a project be remove from the extension lists

Posted: Wed Mar 28, 2007 3:16 am
by vsr
If the program / site has been hacked?

http://www.weberr.de/index.php?option=c ... &Itemid=37

This URL shows that the site has been hacked. 

Should RWCARDS be removed until the site is cleaned up to make sure that no infected files are downloaded?

Re: Shouls a project be remove from the extension lists

Posted: Wed Mar 28, 2007 8:04 am
by Tonie
Moving to Extensions Directory forum

Re: Shouls a project be remove from the extension lists

Posted: Wed Mar 28, 2007 8:31 am
by LorenzoG
Hi vsr!

Thank you for notifying us. It seems that the developer already has released yesterday, a updated version of RwCards (2.4.4) with a fixed "category id" parameter Remote SQL Query Injection Vulnerability.

I suggest that you update RwCards to version 2.4.4 if you are running any previous version.

Their homepage and download area are okay.
http://www.weberr.de
http://www.weberr.de/index.php?option=c ... e&Itemid=1

We are also going to post information about the update in our "3rd Party/Non Joomla! Security Issues" forum.

Thanks!

Re: Shouls a project be remove from the extension lists

Posted: Wed Mar 28, 2007 9:38 am
by superwebba
Yes, I released an updated version of RwCards (2.4.4) with a fixed "category id" parameter Remote SQL Query Injection Vulnerability
Anyone who uses an earlier version should immediately upgrade!

Ralf Weber