Azrul Studio announce a security issue with older versions of JomComment and MyBlog.

Please be aware that we have upgraded JomComment's and MyBlog's code in order to prevent exploits to your site via an identified security vulnerability.

Although the attacker could not directly manipulate your site data, they could run a specially crafted code and capture the execution time of the code. By monitoring how long these code took to execute, an attacker could make an accurate guess of your backend password.

Do note however, that this issue only affect Jom Comment build 335 and below and MyBlog build 183 and below, both released in January 2008. Component purchased and installed after February 2008 are not affected by this security issues.

We urge all users to upgrade their JomComment and MyBlog installation to the latest build as soon as possible to ensure the safety of your site.

TrackBack URI for this entry

Comments (0)

Subscribe to this comment's feed

Name

Email

Website

Comment

smaller | bigger

Subscribe via email (Registered users only)

I have read and agree to the Terms of Usage.

Write the displayed characters

Add Comment