Help: My Joomla site hacked.

[hellmet]

See this : http://redweb.in/index.php?option=com_artforms&formid=1&Itemid=9

I'm temporarily redirecting redweb.in to red-web.us
I tried looking into some .php files and .html files even in template folders, but I'm not able to figure this out.

I'd appreciate if you could help me get this hackers mess out, and how I could secure the Joomla installation from future attacks.

Thanks!

 

[maxeaus]

Get yourself over to the Joomla forum and start reading up about hacking and security.

It's a common problem with Joomla sites im afraid. The price you pay for free open source.

Joomla extensions often have security problems, you may have to have a look at what may be the issue if this is the cause. Hope you get it fixed soon.

 

[Makis.TV]

Joomla itself is more secure than most of custm cms.
The problem appears when using 3rd party extensions and more specific when u dont follow their updates.
I sugegst you make a list of those 3rd party extensions you have installed and then look the developers websites for any security updates, then upload backup and update them.

look here:
http://www.zone-h.org/content/view/14981/92/

even zone-h.org that has lsited all websites with such problems is using joomla

also serach this at google:

http://www.google.com/search?hl=en&...2xm&q=hacked+joomla.php+line+71&start=30&sa=N

 

[Fugato]

http://milw0rm.com/exploits/6234

Should of updated, I'm afraid.

 

[barefoottech]

check your index.php / configuration.php files
they are the ones usually comprised / replaced
replace them with clean uploads often solves the problem

the configuration.php will need to be edited to reflect the site/database details
if you are using joomla 1.015 or earlier versions of Joomla 1.0.x than time to update to version 1.5.x