{"id":182238,"date":"2026-06-19T08:48:03","date_gmt":"2026-06-19T06:48:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ispravlenie-kriticheskoj-uyazvimosti-v-jce-dopolnenii-dlya-cms-joomla"},"modified":"2026-06-19T08:48:03","modified_gmt":"2026-06-19T06:48:03","slug":"ispravlenie-kriticheskoj-uyazvimosti-v-jce-dopolnenii-dlya-cms-joomla","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/ispravlenie-kriticheskoj-uyazvimosti-v-jce-dopolnenii-dlya-cms-joomla","title":{"rendered":"Korrigjimi i nj\u00eb dob\u00ebsie kritike n\u00eb JCE, nj\u00eb shtes\u00eb p\u00ebr CMS Joomla","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
N\u00eb JCE (Joomla Content Editor), nj\u00eb nga shtesat m\u00eb t\u00eb vjetra dhe m\u00eb t\u00eb popullarizuara n\u00eb ekosistemin Joomla, \u00ebsht\u00eb eliminuar nj\u00eb dob\u00ebsi kritike (CVE-2026-48907) q\u00eb lejon importimin e profilit t\u00eb p\u00ebrdoruesit pa autentifikim. Nj\u00eb sulmues mund t\u00eb p\u00ebrdor\u00eb k\u00ebt\u00eb dob\u00ebsi p\u00ebr t\u00eb ngarkuar nj\u00eb profil q\u00eb \u00e7aktivizon verifikimin e MIME-typeve dhe mund\u00ebson ngarkimin e skripteve PHP n\u00eb server. Jan\u00eb regjistruar p\u00ebrdorime t\u00eb k\u00ebsaj dob\u00ebsie nga kriminel\u00ebt p\u00ebr t\u00eb instaluar webshell, i cili ofron akses t\u00eb larg\u00ebt n\u00eb sistem.<\/p>\n
Dob\u00ebsia \u00ebsht\u00eb eliminuar n\u00eb versionin JCE 2.9.99.5, pas s\u00eb cil\u00ebs \u00ebsht\u00eb publikuar nj\u00eb p\u00ebrdit\u00ebsim 2.9.99.6 me forca t\u00eb rritura sigurie. Dob\u00ebsia prek t\u00eb gjitha versionet e JCE (nga Joomla 3 deri n\u00eb Joomla 6). Pas instalimit t\u00eb p\u00ebrdit\u00ebsimit, duhet t\u00eb siguroheni se sistemi nuk \u00ebsht\u00eb kompromentuar dhe nuk ka mbetur ndonj\u00eb backdoor i instaluar nga sulmuesit. <\/p>\n
Kontrolloni n\u00ebse ka nj\u00eb profil fals, i cili zakonisht ka nj\u00eb em\u00ebr t\u00eb gjeneruar automatikisht pa kuptim, n\u00eb nd\u00ebrfaqen e administratorit n\u00eb seksionin «Komponent\u00ebt» — «Redaktori JCE» — «Profili i redaktorit». Gjithashtu, duhet t\u00eb siguroheni q\u00eb t\u00eb mos ket\u00eb leje p\u00ebr ngarkimin e skedareve PHP n\u00eb parametrin «Lejet e zgjerimeve t\u00eb skedareve» dhe t\u00eb kontrolloni logjet p\u00ebr k\u00ebrkesa n\u00eb url-n\u00eb e importit t\u00eb profileve (index.php?option=com_jce&task=profiles.import). Nj\u00eb kompromitim mund t\u00eb tregoj\u00eb gjithashtu shfaqja e skedar\u00ebve t\u00eb huaj .htaccess dhe skedar\u00ebve me emra tipik\u00eb p\u00ebr CMS WordPress, jo Joomla, si wp-config.php dhe wp-cron.php. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"