Download Joomla! 1.0.4

Joomla! is a dynamic system written in PHP that allows the user to manage, organize and publish content. It contains many features that can be found in content management systems, blogs, collaboration sites and forums. Joomla! is a split from Mambo, also a PHP-based content management system. The developers have released version 1.0.4 with improved security. The announcement looks like this:

Joomla! 1.0.4 [ Sundial ] is now available on the forge for download. This is a Security Release, which means it contains fixes for six Security Vulnerabilities. We highly recommend that you upgrade to this version. 1.0.4 is available as a Full Package, which contains all Joomla! files and a Patch Package which contains only the files that have been changed by the Security work conducted. 1.0.4 Contains fixes for 6 Security Vulnerabilities.

Critical Level Threats

• Potential XSS injection through GET and other variables
• Hardened SEF against XSS injection

low-level threats

• Potential SQL injection into Polls modules through the Itemid variable
• Potential SQL injection in several methods in mosDBTable class
• Potential misuse of Media component file management functions
• Add search limit param (default of 50) to `Search` Mambots to prevent search flooding