[image: Joomla Feed logo]
Serious IDevAffiliate Security Hole
Written by Alledia Blog   
Tuesday, 26 August 2008

This is an worrying security update that affects the Joomla world. Up until now iDevAffiliate - the system used by almost every Joomla affiliate program - has stored passwords and Social Security numbers UNENCRYPTED in the database. That means if you join an iDevAffiliate program the owner can go along and view your password whether its 12345 , password or something more personal. From there they can go back to your site, see other iDev programs that you're using and try to login to those, pretending to be you. If you're dumb enough to use the same login for your email also ...

Read original post at source site... http://feeds.feedburner.com/~r/Alledia/~3/375629705/index.php.

Comments (0) >> feed
Write comment
quote
bold
italicize
underline
strike
url
image
quote
quote
Smiley
Smiley
Smiley
Smiley
Smiley
Smiley
Smiley
Smiley
Smiley
Smiley
Smiley
Smiley


Write the displayed characters


busy
 
< Prev   Next >
Home arrow blogs arrow Serious IDevAffiliate Security Hole
blog categories
about joomla
joomla advocates
actions
read comments
the joomlasphere by email

subscribe to our email newsletter and get updates on all the latest news from the joomlasphere!