joomla漏洞_Joomla关键零日漏洞–远程命令执行漏洞

joomla漏洞

CVE编号：CVE​​-2015-8562 (CVE Numbers: CVE-2015-8562)

A recently discovered zero day vulnerability within Joomla is currently being actively exploited, this vulnerability allows an attacker to take full control of an affected site’s administration area.

目前正在积极利用Joomla中最近发现的零日漏洞，该漏洞使攻击者可以完全控制受影响站点的管理区域 。

This exploit affects versions 1.5 through 3.4.5, you can determine your Joomla version by logging into your administrator area, your version will displayed either in the top right hand corner or at the bottom of your administrator panel.

此漏洞会影响1.5到3.4.5版本，您可以通过登录到管理员区域来确定Joomla版本，您的版本将显示在右上角或管理员面板的底部。

If your site is an affected version it is essential you either upgrade or apply the latest patches.

如果您的站点是受影响的版本，则必须升级或应用最新的补丁程序。

If you are running any currently supported version of Joomla you should upgrade to the latest version

如果您正在运行Joomla当前支持的任何版本，则应升级到最新版本

For EOL versions a patch has been provided which can be found at the link below, however we strongly recommend client’s upgrade to the latest version as soon as possible.

对于EOL版本，提供了一个修补程序，可以在下面的链接中找到该修补程序，但是我们强烈建议客户尽快将其升级到最新版本。

Joomla EOL patches for  CVE-2015-8562

适用于CVE-2015-8562的Joomla EOL补丁

 

翻译自: https://www.eukhost.com/blog/webhosting/joomla-critical-zero-day-exploit-remote-command-execution-vulnerability/

joomla漏洞