Recently, important updates were released for Joomla 2.5 and Joomla 3.1 that address a critical security issue where unauthorized file uploads may be uploaded to a site.
Joomla 1.5 is also affected by this vulnerability. However Joomla 1.5 has reached it's end-of-life and therefore no update is being released for it. A patch has been published, however it cannot simply be installed using Joomla's extension manager.
Anything Digital is proud to announce the immediate availability of an installable package — SECURITY PATCH 31626 — that easily installs the Joomla 1.5 Security Patch like any Joomla extension.
To apply the patch:
- If the site is currently at Joomla 1.5.26 proceed to step 2. If not upgrade your site to the latest stable version of Joomla 1.5 using this update package. (see also: upgrade instructions).
- Download the SECURITY PATCH 31626 using the button below.
- Log into your Joomla 1.5 administration panel
- Select Extensions > Install/Uninstall > Choose File > Upload & Install
The installer cleans up after itself, leaving only the files that the patch replaces.
Full details on the patch can be found at the official issue tracker announcement at joomlacode.org
A big THANK YOU goes out to the production team for addressing this issue eventhough official support for joomla 1.5 has ended.