CVE

Id
95689  
CVE No.
CVE-2016-8869  
Status
Candidate  
Description
The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4 allows remote attackers to gain privileges by leveraging incorrect use of unfiltered data when registering on a site.  
Phase
Assigned (20161021)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
799148 95689 CVE-2016-8869 EXPLOIT-DB:40637  View
799149 95689 CVE-2016-8869 URL:https://www.exploit-db.com/exploits/40637/  View
799150 95689 CVE-2016-8869 MISC:http://www.rapid7.com/db/modules/auxiliary/admin/http/joomla_registration_privesc  View
799151 95689 CVE-2016-8869 MISC:https://blog.sucuri.net/2016/10/details-on-the-privilege-escalation-vulnerability-in-joomla.html  View
799152 95689 CVE-2016-8869 MISC:https://medium.com/@showthread/joomla-3-6-4-account-creation-elevated-privileges-write-up-and-exploit-965d8fb46fa2#.rq4qh1v4r  View
799153 95689 CVE-2016-8869 CONFIRM:https://developer.joomla.org/security-centre/660-20161002-core-elevated-privileges.html  View
799154 95689 CVE-2016-8869 CONFIRM:https://github.com/joomla/joomla-cms/commit/bae1d43938c878480cfd73671e4945211538fdcf  View
799155 95689 CVE-2016-8869 BID:93883  View
799156 95689 CVE-2016-8869 URL:http://www.securityfocus.com/bid/93883  View
799157 95689 CVE-2016-8869 SECTRACK:1037108  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4967 JVNDB-2016-005740 Exponent CMS におけるパーミッションチェックを回避される脆弱性 Exponent CMS は、メソッド名を大文字と小文字で区別しない PHP のリフレクションを使用するため、パーミッションチェックを回避される脆弱性が存在します。 CVE-2016-9182 95689 5 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005740.html  View