CVE-2016-8869

CRITICO 9.8CVE-2016-8869 · Published 04/11/2016 · updated 17/06/2026

Package	Affected versions	Patched versions
joomla! joomla	`≤ 3.6.3`	No fix yet

Description

The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4 allows remote attackers to gain privileges by leveraging incorrect use of unfiltered data when registering on a site.

References

rapid7.com/db/modules/auxiliary/admin/http/joomla_registration_privesc · Third Party Advisory
securityfocus.com/bid/93883 · Third Party Advisory
securitytracker.com/id/1037108 · Third Party Advisory
blog.sucuri.net/2016/10/details-on-the-privilege-escalation-vulnerability-in-joomla.html · Exploit
developer.joomla.org/security-centre/660-20161002-core-elevated-privileges.html · Vendor Advisory
joomla/joomla-cms commit bae1d43 · Patch
medium.com/%40showthread/joomla-3-6-4-account-creation-elevated-privileges-write-up-and-exploit-965d8fb46fa2
exploit-db.com/exploits/40637 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free