Privilege escalation in Joomla! - CVE-2016-8870
Published: October 26, 2016 / Updated: September 14, 2018
Vulnerability identifier: #VU1077
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2016-8870
CWE-ID: CWE-264
Exploitation vector: Remote access
Exploit availability:
Public exploit is available
Vulnerability details
The vulnerability allows a remote user to bypass security restrictions.
The weakness is due to unknown error and lets a remote attacker register on the website even if registration is disabled.
The weakness is due to unknown error and lets a remote attacker register on the website even if registration is disabled.
Affected software
Joomla!
How to mitigate CVE-2016-8870
Update to version 3.6.4.
Links to Public Exploits and PoC-codes
- Exploit #1885 - Joomla-3.4.4-3.6.4_CVE-2016-8869_and_CVE-2016-8870 (Source code: https://github.com/XiphosResearch/exploits/tree/master/Joomraa) (March 18, 2020)
- Exploit #1888 - JoomlaCVE20168869 (Exploit for Joomla 3.4.4 - 3.6.4 (CVE-2016-8869 and CVE-2016-8870)) (March 18, 2020)
- Exploit #13 - Joomla Account Creation and Privilege Escalation (March 18, 2020)
- Exploit #444 - Joomla! 3.4.4 < 3.6.4 - Account Creation / Privilege Escalation (March 18, 2020)