MERRY CHRISTMAS AND HAPPY NEW YEAR!

foobla.com wants to wish you a Merry Christmas and a Happy New Year. To begin the celebration, we have a special gift for you.

UNBELIEVABLE DISCOUNT program for old clients:

Unbelievable discount, it's 50% discount when you purchase any product on http://foobla.com before midnight 2nd January, 2010.

This program is only for old clients and a way for us to say thanks for using our products. When you purchase products on the website, please use coupon code: THANKYOU

Discount program for all clients:

We are also giving new clients a 25% discount this holiday for all Joomla!/ Magento extensions and Drupal modules. This program will expire on midnight 2nd January, 2010 so don't miss this opportunity to get our useful extensions at great discount.

When purchase products on the website, please use coupon code: FOOBLAXMAS

For more information, you can check out our newsletter.

foobla Suggestions for Joomla "idea_id" SQL Injection Vulnerability

Description:
Chip D3 Bi0s has reported a vulnerability in foobla Suggestions for Joomla, which can be exploited by malicious people to conduct SQL injection attacks.

Input passed via the "idea_id" parameter to index.php (if "option" is set to "com_foobla_suggestions" and "controller" to "comment") is not properly sanitised before being used in an SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary code.

The vulnerability is reported in version 1.5.11. Other versions may also be affected.

Source: http://secunia.com/advisories/36767/

Solution: upgrade to latest version (1.5.0.1_build20090922)

See how to get newer version here.

foobla RSS Feed Creator for Joomla "id" SQL Injection

Description:
Chip d3 Bi0s has reported a vulnerability in foobla RSS Feed Creator for Joomla, which can be exploited by malicious people to conduct SQL injection attacks.

Input passed via the "id" parameter to index.php (if "option" is set to "com_jlord_rss" and "task" to "feed") is not properly sanitised before being used in an SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

Source: http://secunia.com/advisories/36748/

Solution: upgrade to latest version (1.5.1.1_build20090922)

See how to get newer version here.