Joomla! < 3.6.3 - Unauthenticated User Account Creation via UsersModelRegistration
Title source: llmExploitation Summary
CVE-2016-8870 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 4 public exploits from researchers including Xiphos Research Ltd, DaDecky, cved-sources, including a Metasploit module auxiliary/admin/http/joomla_registration_privesc.
AI-analyzed exploit summary This exploit leverages a file upload vulnerability in Joomla's com_users component, bypassing whitelisting by using .pht extensions and <?= tags to achieve remote code execution. It automates user creation, admin login, and payload upload.
Description
The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4, when registration has been disabled, allows remote attackers to create user accounts by leveraging failure to check the Allow User Registration configuration setting.
Exploits (4)
This exploit leverages a file upload vulnerability in Joomla's com_users component, bypassing whitelisting by using .pht extensions and <?= tags to achieve remote code execution. It automates user creation, admin login, and payload upload.
This repository contains a functional exploit for CVE-2016-8870, an unauthenticated account creation vulnerability in Joomla. The exploit leverages the legacy user controller task `user.register` to bypass the `allowUserRegistration=0` setting in Joomla versions 3.4.4 through 3.6.3.
This repository provides a Dockerized environment for CVE-2016-8870, a SQL injection vulnerability in Joomla 3.5. The Dockerfile sets up a vulnerable Joomla instance with modified database entries to exploit the vulnerability.
This Metasploit module exploits Joomla versions 3.4.4 through 3.6.3 to create an arbitrary administrative account via privilege escalation and account creation vulnerabilities (CVE-2016-8869 and CVE-2016-8870). It automates the process of user registration with elevated privileges by bypassing authentication checks.
References (9)
Scores
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H