A longstanding bug in the Joomla! content management system, which allowed the takeover of a site by exploiting a vulnerability in the login page, has been patched by the project.