CVE-2016-8870

🗓️ 04 Nov 2016 21:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 193 Views🌐 WEB

The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4 allows remote attackers to create user accounts

Reporter	Title	Published	Views	Family All 22
0day.today	Joomla 3.4.4 - 3.6.4 - Account Creation / Privilege Escalation Exploit	27 Oct 201600:00	–	zdt
Gitee	Exploit for OS Command Injection in Gnu Bash	27 Jul 202504:29	–	gitee
Circl	CVE-2016-8870	27 Oct 201622:27	–	circl
CNVD	Account creation vulnerability in Joomla!	26 Oct 201600:00	–	cnvd
Check Point Advisories	Joomla Core Unauthorized Account Creation (CVE-2016-8870)	30 Oct 201600:00	–	checkpoint_advisories
Cvelist	CVE-2016-8870	4 Nov 201621:00	–	cvelist
Tenable Nessus	FreeBSD : Joomla! -- multiple vulnerabilities (a27d234a-c7f2-11e6-ae1b-002590263bf5)	22 Dec 201600:00	–	nessus
Tenable Nessus	Joomla! 3.4.4 < 3.6.4 Multiple Vulnerabilities	28 Oct 201600:00	–	nessus
Tenable Nessus	Joomla! 3.6.x < 3.6.4 Multiple Vulnerabilities	5 Nov 201800:00	–	nessus
Tenable Nessus	Joomla! 3.5.x < 3.6.4 Multiple Vulnerabilities	5 Nov 201800:00	–	nessus

NVD

Node

joomla joomla!Range≤3.6.3

Source	Link
securitytracker	www.securitytracker.com/id/1037107
developer	www.developer.joomla.org/security-centre/659-20161001-core-account-creation.html
securityfocus	www.securityfocus.com/bid/93876
exploit-db	www.exploit-db.com/exploits/40637/
rapid7	www.rapid7.com/db/modules/auxiliary/admin/http/joomla_registration_privesc
medium	www.medium.com/%40showthread/joomla-3-6-4-account-creation-elevated-privileges-write-up-and-exploit-965d8fb46fa2
blog	www.blog.sucuri.net/2016/10/details-on-the-privilege-escalation-vulnerability-in-joomla.html
github	www.github.com/joomla/joomla-cms/commit/bae1d43938c878480cfd73671e4945211538fdcf
securitytracker	www.securitytracker.com/id/1037108

Parameter	Position	Path	Description	CWE
jform[name]	request body	index.php/component/users/?task=registration.register	Attempt to create a privileged account via registration flow when registration is disabled (CVE-2016-8870).	CWE-20
jform[username]	request body	index.php/component/users/?task=registration.register	Attempt to create a privileged account via registration flow when registration is disabled (CVE-2016-8870).	CWE-20
jform[password1]	request body	index.php/component/users/?task=registration.register	Attempt to create a privileged account via registration flow when registration is disabled (CVE-2016-8870).	CWE-20
jform[password2]	request body	index.php/component/users/?task=registration.register	Attempt to create a privileged account via registration flow when registration is disabled (CVE-2016-8870).	CWE-20
jform[email1]	request body	index.php/component/users/?task=registration.register	Attempt to create a privileged account via registration flow when registration is disabled (CVE-2016-8870).	CWE-20
jform[email2]	request body	index.php/component/users/?task=registration.register	Attempt to create a privileged account via registration flow when registration is disabled (CVE-2016-8870).	CWE-20
option	request body	index.php/component/users/?task=registration.register	Attempt to create a privileged account via registration flow when registration is disabled (CVE-2016-8870).	CWE-20
task	request body	index.php/component/users/?task=registration.register	Attempt to create a privileged account via registration flow when registration is disabled (CVE-2016-8870).	CWE-20
yourtoken	request body	index.php/component/users/?task=registration.register	Attempt to create a privileged account via registration flow when registration is disabled (CVE-2016-8870).	CWE-20
user[name]	request body	index.php/component/users/?task=user.register	Bypassing registration check to create an Administrator via the user.register path (CVE-2016-8870).	CWE-20

06 May 2026 22:30Current

8.7High risk

Vulners AI Score8.7

CVSS 26.8

CVSS 38.1

EPSS0.91606

CWE-20