CVE-2016-8870

This exploit leverages a file upload vulnerability in Joomla's com_users component, bypassing whitelisting by using .pht extensions and <?= tags to achieve remote code execution. It automates user creation, admin login, and payload upload.

This repository provides a Dockerized environment for CVE-2016-8870, a SQL injection vulnerability in Joomla 3.5. The Dockerfile sets up a vulnerable Joomla instance with modified database entries to exploit the vulnerability.

This Metasploit module exploits Joomla versions 3.4.4 through 3.6.3 to create an arbitrary administrative account via privilege escalation and account creation vulnerabilities (CVE-2016-8869 and CVE-2016-8870). It automates the process of user registration with elevated privileges by bypassing authentication checks.