CVE-2016-8870

The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4, when registration has been disabled, allows remote attackers to create user accounts by leveraging failure to check the Allow User Registration configuration setting...

PT-2016-7600

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 3.6.4 Description The issue concerns the register method in the UsersModelRegistration class, which allows remote attackers to gain privileges. This is due to the incorrect use of unfiltered data when registering on a...

PT-2016-7601

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 3.6.4 Description The issue concerns the register method in the UsersModelRegistration class, which fails to check the Allow User Registration configuration setting when registration has been disabled. This allows...