Joomla Login Page Flaw Exposes Admin Credentials

“By exploiting a vulnerability in the login page, an unprivileged remote attacker can efficiently extract all authentication credentials of the LDAP server that is used by the Joomla! installation.

Read full news article on SecurityWeek