Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2016-8870

EPSS 91.51% · P100
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2016-8870

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4, when registration has been disabled, allows remote attackers to create user accounts by leveraging failure to check the Allow User Registration configuration setting.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Joomla! 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Joomla!是美国Open Source Matters团队的一套使用PHP和MySQL开发的开源、跨平台的内容管理系统(CMS)。 Joomla! 3.6.4之前的版本中的Users组件中的controllers/user.php文件中的UsersModelRegistration类中的‘register’方法存在安全漏洞。当注册禁用时，远程攻击者可借助Allow User Registration配置设置检查错误利用该漏洞创建用户账户。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2016-8870

#POC DescriptionSource LinkShenlong Link
1cve-2016-8870https://github.com/cved-sources/cve-2016-8870POC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2016-8870

请登录查看更多情报信息。

Same Patch Batch · n/a · 2016-11-04 · 20 CVEs total

CVE-2016-9177Spark 目录遍历漏洞
CVE-2016-9190Pillow 安全漏洞
CVE-2016-9189Pillow 安全漏洞
CVE-2016-9188Moodle CMS 跨站脚本漏洞
CVE-2016-9187Moodle 任意文件上传漏洞
CVE-2016-9186Moodle 任意文件上传漏洞
CVE-2016-9185OpenStack Heat 安全漏洞
CVE-2016-9184OIC Exponent CMS 安全漏洞
CVE-2016-9183OIC Exponent CMS 安全漏洞
CVE-2016-9182OIC Exponent CMS 安全漏洞
CVE-2016-8576QEMU 资源管理错误漏洞
CVE-2016-8910QEMU 资源管理错误漏洞
CVE-2016-8909QEMU 资源管理错误漏洞
CVE-2016-8869Joomla! 提权漏洞
CVE-2016-8669QEMU 数字错误漏洞
CVE-2016-8668QEMU 安全漏洞
CVE-2016-8667QEMU 安全漏洞
CVE-2016-8578QEMU 安全漏洞
CVE-2016-8577QEMU 内存泄露漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2016-8870

No comments yet

Leave a comment