Discovered a critical error in Joomla!

On 13 December in all versions of CMS Joomla! was discovered a critical vulnerability that allows an attacker to gain full control over the website!

on 13 December in all versions of CMS Joomla! was discovered a critical vulnerability that could allow an attacker by sending a specially crafted request, to obtain complete control over the victim, and execute arbitrary php code.

Inadequate checking your browser settings, when you save the session in the browser, which could lead to remote code execution.

the Degree of danger is high, it means an urgent need to patch sites on older versions and update to 3.4.6 websites in recent versions.

to Exploit the vulnerability will start in a couple of hours!

in addition, the attack is already underway at least 2 days, which means that there is a chance that sites are already infected!!!

a Symptom of infection may be the presence in the logs "JDatabaseDriverMysqli" and "O:" User-agent requests.

But there is good news, the developers quickly released a patch, even for unsupported branches such as Joomla 1.5 and 2.5.

Developers CMS Joomla! has released a security update for Joomla 3.x, which must be installed on all sites using this CMS.

To eliminate the threat is urgently required to perform the following actions:

Joomla 3.x - just updated to version 3.4.6 using the Joomla update Manager (section "Components" - > "Joomla Update!")

Joomla 2.5.x download file, upload it to the server via the control panel "Hosting" -- "File Manager" in your site root folder and unpack to the current directory.

Joomla 1.5.x download file, upload it to the server via the control panel "Hosting" -- "File Manager" in your site root folder and unpack to the current directory.

then contact the experts who will be able to check out or, choose to update the security patch!

For the clients of Studio Web Building hosting and have taken additional measures to block malicious requests, but to protect sites from the threat is possible only by installing the necessary patches, as recommended above!