A theoretical security risk in the JEvent search plugin

by **Geraint** » Mon Jan 18, 2010 5:46 pm

A theoretical security risk has been identified in the search plugin of JEvents 1.5.

This affects all version of the JEvents 1.5 plugin up to and including version 1.5.3.

You should download and install version 1.5.3b of the plugin from http://joomlacode.org/gf/download/frsre ... 1.5.3b.zip as soon as possible.

This version should be compatible with versions 1.5.0-1.5.2 of JEvents as well as versions 1.5.3 and 1.5.4.

by **dfirsching** » Mon Feb 01, 2010 1:38 pm

You have another page on this site describing this vulnerability that links to something called mod_jevents_switchview_1.5.3.zip. What is the relationship of switchview to the vulnerability? Or maybe that should point to the plg_search_events_1.5.3b.zip also? Thanks for clarifying.

by **Geraint** » Mon Feb 01, 2010 2:37 pm

It is the search plugin that should be updated - where did I mention the switch view module (I need to correct that)?

Thanks

by **skelvin00** » Thu Apr 08, 2010 7:21 am

Hello,

Thanks for the informative post, I really appreciate your download section especially Free Downloads. Get some choice of layouts.

Regards,

Sam Kelvin

by **phoenixaz** » Tue Jul 13, 2010 2:11 pm

Versions prior to JEvents 1.5.3b are vulnerable.