Discovering a Joomla Exploit for Possible Malware: Social Engineering and a PHP BASE64 GIF Exploit

Authors

M.S. Terrell Rohm, The Active Network, Inc.
C.E. Tapie Rohm Jr., California State University San Bernardino
Haakon Brown, California State University San Bernardino

Abstract

his article discusses the importance of Joomla as a Content Management System that is used by 2.7% of the web and how a possible new malware exploit has been discovered. The PHP BASE64 malware exploit is a well-documented exploit of PHP but the implementation of this exploit as it relates to Joomla is a very ingenious method not previously used before, as far as the authors were able to discover. In this particularly case, PHP code is embedded in a GIF file to produce a very sophisticated and unique malware exploit to Joomla.

Recommended Citation

Rohm, M.S. Terrell; Rohm, C.E. Tapie Jr.; and Brown, Haakon (2011) "Discovering a Joomla Exploit for Possible Malware: Social Engineering and a PHP BASE64 GIF Exploit," Communications of the IIMA: Vol. 11: Iss. 1, Article 5.
DOI: https://doi.org/10.58729/1941-6687.1156
Available at: https://scholarworks.lib.csusb.edu/ciima/vol11/iss1/5