Summary: another backdoored joomla component (yawn)
Application: Jumi, a joomla component
About Jumi:
Jumi is the set of custom code extensions for Joomla! 1.0.x and 1.5.x in
their native modes. Since 2006 more then 200.000 downloads. With Jumi you
can include php, html, javascript scripts into the modules position,
articles, category or section descriptions, or into your own custom made
component pages.
Fun snippet from the release_notes.txt:
Changes:
- Fixed: security vulnerability
Vendor notified:
*.cz .. I looked at the fun pictures on the "about us" screen, and
left it at that.
Joomla? A CC of this mail on their "STRIKE TEAM" form (are you
afraid of e-mail gentlemen?)
Download url/s:
http://extensions.joomla.org/extensions/search/
...
Read more »