Joomla Templates Club 406,261 posts

[jurgeng Friend jurgengJoin date: December 2010Posts: 77Downloads:56Uploads:12 Thanks: 7 Thanked: 6 times in 3 posts]

#939998

Dear Joomlart,

when looking into the ACM template files, I noticed a slight exposure vulnerability.
The files are not starting with the classical safety line:

defined('_JEXEC') or die;

When trying to launch the code, it doesn’t expose very much information, but I still consider it a mild security risk.

1 user says Thank You to jurgeng for this useful post

1. Saguaros

[Saguaros Moderator SaguarosJoin date: September 2014Posts: 31405Downloads:237Uploads:471 Thanks: 845 Thanked: 5346 times in 4964 posts]

#940301

Hi @jurgeng,

Thank you very much for your report. Some types in ACM module missed this line of code, the team will update it.

[jurgeng Friend jurgengJoin date: December 2010Posts: 77Downloads:56Uploads:12 Thanks: 7 Thanked: 6 times in 3 posts]

#940307

You’re welcome. I know the value of good feedback. That’s why I make the effort of telling. 🙂
(I’m not whining, I fixed if on my own site). Feel free to close this support ticket if the bug is in your tracking system.

[Saguaros Moderator SaguarosJoin date: September 2014Posts: 31405Downloads:237Uploads:471 Thanks: 845 Thanked: 5346 times in 4964 posts]

#940308

Yes, it’s lined up in the backlog and will be updated pretty soon.

Thank you again!!!

[Author]

Posts