Description
The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4, when registration has been disabled, allows remote attackers to create user accounts by leveraging failure to check the Allow User Registration configuration setting.
Metrics
CVSS 3.0 8.1/10
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://www.rapid7.com/db/modules/auxiliary/admin/http/joomla_registration_privescThird Party Advisory
- http://www.securityfocus.com/bid/93876Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037107
- http://www.securitytracker.com/id/1037108Third Party Advisory, VDB Entry
- https://blog.sucuri.net/2016/10/details-on-the-privilege-escalation-vulnerability-in-joomla.html
- https://developer.joomla.org/security-centre/659-20161001-core-account-creation.htmlVendor Advisory
- https://github.com/joomla/joomla-cms/commit/bae1d43938c878480cfd73671e4945211538fdcfPatch
- https://medium.com/%40showthread/joomla-3-6-4-account-creation-elevated-privileges-write-up-and-exploit-965d8fb46fa2#.rq4qh1v4r
- https://www.exploit-db.com/exploits/40637/Exploit, Third Party Advisory
- http://www.rapid7.com/db/modules/auxiliary/admin/http/joomla_registration_privescThird Party Advisory
- http://www.securityfocus.com/bid/93876Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037107
- http://www.securitytracker.com/id/1037108Third Party Advisory, VDB Entry
- https://blog.sucuri.net/2016/10/details-on-the-privilege-escalation-vulnerability-in-joomla.html
- https://developer.joomla.org/security-centre/659-20161001-core-account-creation.htmlVendor Advisory
- https://github.com/joomla/joomla-cms/commit/bae1d43938c878480cfd73671e4945211538fdcfPatch
- https://medium.com/%40showthread/joomla-3-6-4-account-creation-elevated-privileges-write-up-and-exploit-965d8fb46fa2#.rq4qh1v4r
- https://www.exploit-db.com/exploits/40637/Exploit, Third Party Advisory
Timeline
- Published
- Nov 4, 2016
- Last modified
- Jun 17, 2026
- NVD status
- Modified