From owner-freebsd-security@FreeBSD.ORG  Thu Jul  2 20:42:11 2009
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id A99DC1065672;
	Thu,  2 Jul 2009 20:42:11 +0000 (UTC)
	(envelope-from vinnix.bsd@gmail.com)
Received: from mail-yx0-f181.google.com (mail-yx0-f181.google.com
	[209.85.210.181])
	by mx1.freebsd.org (Postfix) with ESMTP id 510F38FC13;
	Thu,  2 Jul 2009 20:42:11 +0000 (UTC)
	(envelope-from vinnix.bsd@gmail.com)
Received: by yxe11 with SMTP id 11so2809262yxe.3
	for <multiple recipients>; Thu, 02 Jul 2009 13:42:10 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma;
	h=domainkey-signature:mime-version:received:date:message-id:subject
	:from:to:content-type:content-transfer-encoding;
	bh=oqnDsY3nG8nQTIxjDdn2SQElY1eKLybXNClm/Q1zZ5s=;
	b=ko/52f1HrT0TQ4j9tSI5SFjMh/Bo3JNOos72Zk/jhDwMNQGpL9RVkrDZazlTJpGGKh
	taclKjcDa5Gb19VXh3sXnahuTXC82IsLNSUDVJAoedQ4mVs+KhVKPkih2bEnkq72uErc
	k2bU+F83CY4Tz1zuCjYEcJb2RvwWsnJqAd004=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma;
	h=mime-version:date:message-id:subject:from:to:content-type
	:content-transfer-encoding;
	b=hpZzym5yDaJ0x/5kKL7tnaoSroFM0nQuePcZf9ioCeq4G/gd177qu1afQrBn06H/Cy
	izqXIAo3dH2XTjxj2pkz9MRjsUUCNuQm+wH3UkGHD+AR5NiDJzc49yDo7pTv+RuhBa5B
	1OiDQwkKnzphzzOui4PrSJqPT40RVXmz2U7/0=
MIME-Version: 1.0
Received: by 10.231.39.131 with SMTP id g3mr223556ibe.34.1246566026511; Thu, 
	02 Jul 2009 13:20:26 -0700 (PDT)
Date: Thu, 2 Jul 2009 17:20:26 -0300
Message-ID: <1e31c7980907021320i164bc5edj32095c9df1f8096e@mail.gmail.com>
From: Vinicius Abrahao <vinnix.bsd@gmail.com>
To: robi@nunnisoft.ch, freebsd-security@freebsd.org, garga@freebsd.org
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Cc: 
Subject: Recent XSS in joomla 1.5.11
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 02 Jul 2009 20:42:11 -0000

Hi Fellows,

I read that we have a new issue with joomla.

http://packetstormsecurity.org/0907-exploits/joomla1512-xss.txt
http://www.joomla.org/announcements/release-news/5242-joomla-1512-released.=
html

Thanks,
Vin=EDcius