CVEvulnerability
CVE-2016-8870
8.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-11-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.1 HIGH — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-20
Description
The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4, when registration has been disabled, allows remote attackers to create user accounts by leveraging failure to check the Allow User Registration configuration setting.
Affected configurations
• joomla joomla\! (<= 3.6.3)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.rapid7.com/db/modules/auxiliary/admin/http/joomla_registration_privesc Third Party Advisory
- http://www.securityfocus.com/bid/93876 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037107 www.securitytracker.com
- http://www.securitytracker.com/id/1037108 Third Party Advisory, VDB Entry
- https://blog.sucuri.net/2016/10/details-on-the-privilege-escalation-vulnerability-in-joomla.html blog.sucuri.net
- https://developer.joomla.org/security-centre/659-20161001-core-account-creation.html Vendor Advisory
- https://github.com/joomla/joomla-cms/commit/bae1d43938c878480cfd73671e4945211538fdcf Patch
- https://medium.com/%40showthread/joomla-3-6-4-account-creation-elevated-privileges-write-up-and-exploit-965d8fb46fa2#.rq4qh1v4r medium.com
- https://www.exploit-db.com/exploits/40637/ Exploit, Third Party Advisory
- http://www.rapid7.com/db/modules/auxiliary/admin/http/joomla_registration_privesc Third Party Advisory
- http://www.securityfocus.com/bid/93876 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037107 www.securitytracker.com
- http://www.securitytracker.com/id/1037108 Third Party Advisory, VDB Entry
- https://blog.sucuri.net/2016/10/details-on-the-privilege-escalation-vulnerability-in-joomla.html blog.sucuri.net
- https://developer.joomla.org/security-centre/659-20161001-core-account-creation.html Vendor Advisory
- https://github.com/joomla/joomla-cms/commit/bae1d43938c878480cfd73671e4945211538fdcf Patch
- https://medium.com/%40showthread/joomla-3-6-4-account-creation-elevated-privileges-write-up-and-exploit-965d8fb46fa2#.rq4qh1v4r medium.com
- https://www.exploit-db.com/exploits/40637/ Exploit, Third Party Advisory