This was patched by our security team Friday, July 16th.

[20100704] - Core - XSS Vulnerabillitis in Back End
Thursday, 15 July 2010 16:04

    * Project: Joomla!
    * SubProject: All
    * Severity: Medium
    * Versions: 1.5.18 and all previous 1.5 releases
    * Exploit type: XSS Injection
    * Reported Date: 2010-June-1
    * Fixed Date: 2010-July-15

We recently got a high profile client that had been hacked while hosting at GoDaddy. This attacker used the same method described by the Sucuri Security Labs official blog. We found several non standard Joomla! files such as irc. and suspicious base 64 code in the header of the index.php file in the template folder.

Recently, there have been massive large scale defacements and malware insertions on Network Solutions and GoDaddy web servers. There are many reasons for this. MadTek would like to help. If you host on GoDaddy or Network Solutions we will assess your situation at no cost or obligation and give you a rock solid estimate.

Second mystery outbreak in a week

Network Solutions' security team is battling a mysterious attack that has silently infected a "huge" number of the websites it hosts with malicious code.