Mambo News

Security Patch Released

Potential Vulnerability Reported, Patch Released

Investigations by GulfTech Research And Development have revealed a long standing weakness in Mambo that could allow a hacker to compromise sites built on Mambo.  The firm's findings will be published in about a week's time.  

The Mambo development team has created fixes for versions 4.5.3 and 4.5.3h.  The new patch files can be found in the patches section of the Mambo Code forge.

The patch packages are delivered in both zip and TAR.GZ formats - select whichever is right for you. Each package contains all the necessary files to protect your installation from this vulnerability. 
The files included in the package should be used to replace the corresponding files in your existing installation, as as per the instructions located with the package.

This is a recommended update. If you are running an earlier version of Mambo than 4.5.3 we recommend that you consider upgrading.

::For More Help:: 

• If you should need assistance or simply wish to discuss Mambo issues with others, please visit the Forums: http://forum.mambo-foundation.org
• Keep up to date with Security Announcements by subscribing to the Mambo Security Announcements Mailing List. Be the first to know. Learn more...