CVE-2012-1563

HIGH

Joomla! < 2.5.3 - Unauthenticated Admin Account Creation

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2012-1563. PoCs published by Charles Fol.

AI-analyzed exploit summary This exploit leverages a vulnerability in Joomla! <= 2.5.2 to create an admin account by manipulating form data and bypassing password validation. It uses a two-step process to exploit the mismatched password validation flaw.

Description

Joomla! before 2.5.3 allows Admin Account Creation.

Exploits (1)

exploitdb WORKING POC
by Charles Fol · pythonwebappsphp
https://www.exploit-db.com/exploits/41156

This exploit leverages a vulnerability in Joomla! <= 2.5.2 to create an admin account by manipulating form data and bypassing password validation. It uses a two-step process to exploit the mismatched password validation flaw.

Classification
Working Poc 95%
Attack Type
Auth Bypass
Complexity
Moderate
Reliability
Reliable
Target: Joomla! <= 2.5.2
No auth needed
Prerequisites: Access to the Joomla! registration form · Network connectivity to the target Joomla! instance
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Mailing List, Third Party Advisory x_refsource_misc
http://www.openwall.com/lists/oss-security/2012/03/19/11
Third Party Advisory, VDB Entry x_refsource_misc
https://www.exploit-db.com/exploits/41156/

Scores

CVSS v3 7.5
EPSS 0.0890
EPSS Percentile 94.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Details

CWE
CWE-269
Status published
Products (1)
joomla/joomla\! < 2.5.3
Published Jan 15, 2020
Tracked Since Feb 18, 2026