A security issue has been discovered in the Kide Shoutbox component for Joomla, which can be exploited by malicious people to bypass certain security restrictions.

The vulnerability is caused due to improper authentication for posted messages. This can be exploited to bypass the "Only to registered users" configuration setting and post messages with an arbitrary user name via index.php (when "option" is set to "com_kide" and "task" is set to "insertar").

The vulnerability is confirmed in version 0.4.6. Other versions may also be vulnerable.

Solution
Do not rely on the product's user restriction.

Provided and/or discovered by
An anonymous person

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area