{"id":4437,"date":"2013-01-24T08:25:14","date_gmt":"2013-01-24T14:25:14","guid":{"rendered":"https:\/\/www.siteground.com\/blog\/?p=4437"},"modified":"2025-09-18T14:49:26","modified_gmt":"2025-09-18T14:49:26","slug":"jce-vulnerability","status":"publish","type":"post","link":"https:\/\/www.siteground.com\/blog\/jce-vulnerability\/","title":{"rendered":"JCE\/Image Manager vulnerability? NOT on SiteGround servers anymore!"},"content":{"rendered":"<p style=\"text-align: justify\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-4452\" alt=\"You should always update!\" src=\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2014\/01\/you-should-always-update.png\" width=\"530\" height=\"185\"><\/p>\n<p style=\"text-align: justify\">Few days ago our security team has come across a JCE related vulnerability that has the potential to affect many Joomla 1.5.x based websites. The problem is that an old version of one of the JCE addons called ImageManager has turned out to be vulnerable to attacks. The number of the affected websites is big, because many templates &nbsp;providers include the JCE editor together with ImageManager as part of their template bundle installations. So many Joomla users have these extensions without having installed them themselves.<\/p>\n<p><!--more--><\/p>\n<p style=\"text-align: justify\">After we noticed that few of our customers are hacked this way, we have immediately intervened in order to prevent this from spreading on our servers. Our security team has added custom rules to our Apache servers that will block any attempts for hacking Joomla 1.5 sites through this security hole. In addition, files with malicious code have been identified and removed immediately. If you&#8217;re a SiteGround user and think your website is compromised, please contact our Technical Support Team and we will take a look at it immediately.<\/p>\n<p style=\"text-align: justify\">However, we strongly recommend that all Joomla 1.5 users check if JCE with ImageManager is included in their installation and make sure to update both to their latest versions.<\/p>\n<p style=\"text-align: justify\">And another side note: if you use Joomla 1.5 you should seriously consider moving to Joomla 2.5 as soon as possible. The whole 1.5 branch is no longer supported by Joomla and though it has been stable for a long time and has no known security issue at the moment, if one occurs in the future (say tomorrow) it will not be fixed. So as always the number one rule to stay safe is: always use up-to-date applications and extensions so you stay one step ahead of the hackers!<\/p>\n\n\n<p>[subscribe_cta]<\/p>\n","protected":false},"excerpt":{"rendered":"Few days ago our security team has come across a JCE related vulnerability that has the potential to affect many Joomla 1.5.x based websites. The problem is that an old version of one of the JCE addons called ImageManager has turned out to be vulnerable to attacks. The number of the affected websites is big,&hellip;","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2098,2018,12],"tags":[],"class_list":["post-4437","post","type-post","status-publish","format-standard","hentry","category-hosting-insights","category-product-updates","category-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v24.2 (Yoast SEO v24.2) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>JCE\/Image Manager vulnerability? NOT on SiteGround servers anymore! : SiteGround Blog<\/title>\n<meta name=\"description\" content=\"Few days ago our security team has come across a JCE related vulnerability that has the potential to affect many Joomla 1.5.x based websites. The problem\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/newblog.siteground.com\/en\/jce-vulnerability\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"JCE\/Image Manager vulnerability? NOT on SiteGround servers anymore!\" \/>\n<meta property=\"og:description\" content=\"Few days ago our security team has come across a JCE related vulnerability that has the potential to affect many Joomla 1.5.x based websites. The problem\" \/>\n<meta property=\"og:url\" content=\"https:\/\/newblog.siteground.com\/en\/jce-vulnerability\/\" \/>\n<meta property=\"og:site_name\" content=\"SiteGround\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/siteground\" \/>\n<meta property=\"article:published_time\" content=\"2013-01-24T14:25:14+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-09-18T14:49:26+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2014\/01\/you-should-always-update.png\" \/>\n\t<meta property=\"og:image:width\" content=\"530\" \/>\n\t<meta property=\"og:image:height\" content=\"185\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Hristo Pandjarov\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@siteground\" \/>\n<meta name=\"twitter:site\" content=\"@siteground\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Hristo Pandjarov\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/jce-vulnerability\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/jce-vulnerability\/\"},\"author\":{\"name\":\"Hristo Pandjarov\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/ac3e1be52d672a8747613b4fa6808390\"},\"headline\":\"JCE\/Image Manager vulnerability? NOT on SiteGround servers anymore!\",\"datePublished\":\"2013-01-24T14:25:14+00:00\",\"dateModified\":\"2025-09-18T14:49:26+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/jce-vulnerability\/\"},\"wordCount\":299,\"commentCount\":10,\"publisher\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/jce-vulnerability\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2014\/01\/you-should-always-update.png\",\"articleSection\":[\"Hosting Insights\",\"Product Updates\",\"Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/newblog.siteground.com\/en\/jce-vulnerability\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/jce-vulnerability\/\",\"url\":\"https:\/\/newblog.siteground.com\/en\/jce-vulnerability\/\",\"name\":\"JCE\/Image Manager vulnerability? NOT on SiteGround servers anymore! : SiteGround Blog\",\"isPartOf\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/jce-vulnerability\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/jce-vulnerability\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2014\/01\/you-should-always-update.png\",\"datePublished\":\"2013-01-24T14:25:14+00:00\",\"dateModified\":\"2025-09-18T14:49:26+00:00\",\"description\":\"Few days ago our security team has come across a JCE related vulnerability that has the potential to affect many Joomla 1.5.x based websites. The problem\",\"breadcrumb\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/jce-vulnerability\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/newblog.siteground.com\/en\/jce-vulnerability\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/jce-vulnerability\/#primaryimage\",\"url\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2014\/01\/you-should-always-update.png\",\"contentUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2014\/01\/you-should-always-update.png\",\"width\":530,\"height\":185,\"caption\":\"You should always update!\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/jce-vulnerability\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/newblog.siteground.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"JCE\/Image Manager vulnerability? NOT on SiteGround servers anymore!\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#website\",\"url\":\"https:\/\/newblog.siteground.com\/en\/\",\"name\":\"SiteGround Blog\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/newblog.siteground.com\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\",\"name\":\"SiteGround Blog\",\"url\":\"https:\/\/newblog.siteground.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg\",\"contentUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg\",\"width\":1200,\"height\":400,\"caption\":\"SiteGround Blog\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/siteground\",\"https:\/\/x.com\/siteground\",\"https:\/\/www.instagram.com\/siteground\/\",\"https:\/\/www.youtube.com\/@siteground\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/ac3e1be52d672a8747613b4fa6808390\",\"name\":\"Hristo Pandjarov\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e7d38ccbb1776eaf1c34c8453bdc6de1?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e7d38ccbb1776eaf1c34c8453bdc6de1?s=96&d=mm&r=g\",\"caption\":\"Hristo Pandjarov\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/in\/hristo-pandjarov-05194841\/\"],\"url\":\"https:\/\/newblog.siteground.com\/en\/author\/hristo\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"JCE\/Image Manager vulnerability? NOT on SiteGround servers anymore! : SiteGround Blog","description":"Few days ago our security team has come across a JCE related vulnerability that has the potential to affect many Joomla 1.5.x based websites. The problem","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/newblog.siteground.com\/en\/jce-vulnerability\/","og_locale":"en_US","og_type":"article","og_title":"JCE\/Image Manager vulnerability? NOT on SiteGround servers anymore!","og_description":"Few days ago our security team has come across a JCE related vulnerability that has the potential to affect many Joomla 1.5.x based websites. The problem","og_url":"https:\/\/newblog.siteground.com\/en\/jce-vulnerability\/","og_site_name":"SiteGround","article_publisher":"https:\/\/www.facebook.com\/siteground","article_published_time":"2013-01-24T14:25:14+00:00","article_modified_time":"2025-09-18T14:49:26+00:00","og_image":[{"width":530,"height":185,"url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2014\/01\/you-should-always-update.png","type":"image\/png"}],"author":"Hristo Pandjarov","twitter_card":"summary_large_image","twitter_creator":"@siteground","twitter_site":"@siteground","twitter_misc":{"Written by":"Hristo Pandjarov","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/newblog.siteground.com\/en\/jce-vulnerability\/#article","isPartOf":{"@id":"https:\/\/newblog.siteground.com\/en\/jce-vulnerability\/"},"author":{"name":"Hristo Pandjarov","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/ac3e1be52d672a8747613b4fa6808390"},"headline":"JCE\/Image Manager vulnerability? NOT on SiteGround servers anymore!","datePublished":"2013-01-24T14:25:14+00:00","dateModified":"2025-09-18T14:49:26+00:00","mainEntityOfPage":{"@id":"https:\/\/newblog.siteground.com\/en\/jce-vulnerability\/"},"wordCount":299,"commentCount":10,"publisher":{"@id":"https:\/\/newblog.siteground.com\/en\/#organization"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/jce-vulnerability\/#primaryimage"},"thumbnailUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2014\/01\/you-should-always-update.png","articleSection":["Hosting Insights","Product Updates","Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/newblog.siteground.com\/en\/jce-vulnerability\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/newblog.siteground.com\/en\/jce-vulnerability\/","url":"https:\/\/newblog.siteground.com\/en\/jce-vulnerability\/","name":"JCE\/Image Manager vulnerability? NOT on SiteGround servers anymore! : SiteGround Blog","isPartOf":{"@id":"https:\/\/newblog.siteground.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/newblog.siteground.com\/en\/jce-vulnerability\/#primaryimage"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/jce-vulnerability\/#primaryimage"},"thumbnailUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2014\/01\/you-should-always-update.png","datePublished":"2013-01-24T14:25:14+00:00","dateModified":"2025-09-18T14:49:26+00:00","description":"Few days ago our security team has come across a JCE related vulnerability that has the potential to affect many Joomla 1.5.x based websites. The problem","breadcrumb":{"@id":"https:\/\/newblog.siteground.com\/en\/jce-vulnerability\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/newblog.siteground.com\/en\/jce-vulnerability\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/jce-vulnerability\/#primaryimage","url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2014\/01\/you-should-always-update.png","contentUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2014\/01\/you-should-always-update.png","width":530,"height":185,"caption":"You should always update!"},{"@type":"BreadcrumbList","@id":"https:\/\/newblog.siteground.com\/en\/jce-vulnerability\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/newblog.siteground.com\/en\/"},{"@type":"ListItem","position":2,"name":"JCE\/Image Manager vulnerability? NOT on SiteGround servers anymore!"}]},{"@type":"WebSite","@id":"https:\/\/newblog.siteground.com\/en\/#website","url":"https:\/\/newblog.siteground.com\/en\/","name":"SiteGround Blog","description":"","publisher":{"@id":"https:\/\/newblog.siteground.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/newblog.siteground.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/newblog.siteground.com\/en\/#organization","name":"SiteGround Blog","url":"https:\/\/newblog.siteground.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg","contentUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg","width":1200,"height":400,"caption":"SiteGround Blog"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/siteground","https:\/\/x.com\/siteground","https:\/\/www.instagram.com\/siteground\/","https:\/\/www.youtube.com\/@siteground"]},{"@type":"Person","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/ac3e1be52d672a8747613b4fa6808390","name":"Hristo Pandjarov","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e7d38ccbb1776eaf1c34c8453bdc6de1?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e7d38ccbb1776eaf1c34c8453bdc6de1?s=96&d=mm&r=g","caption":"Hristo Pandjarov"},"sameAs":["https:\/\/www.linkedin.com\/in\/hristo-pandjarov-05194841\/"],"url":"https:\/\/newblog.siteground.com\/en\/author\/hristo\/"}]}},"_links":{"self":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/4437","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/comments?post=4437"}],"version-history":[{"count":2,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/4437\/revisions"}],"predecessor-version":[{"id":18035,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/4437\/revisions\/18035"}],"wp:attachment":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/media?parent=4437"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/categories?post=4437"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/tags?post=4437"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}