Sploitus

CVE-2016-8869

14 known exploits for CVE-2016-8869

The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4 allows remote attackers to gain privileges by leveraging incorrect use of unfiltered data when registering on a site.

Affected products
Joomla!
Joomla Joomla\!
≤ 3.6.3
Fix
Available
CVSS 3.0
9.8 CRITICAL
EPSS
97.4% (100th percentile)
Weakness
CWE-20
NVD status
Modified
Published
2016-11-04
CVE-2016-8869 at NVD
Authoritative description, scoring and affected products

14 known exploits for CVE-2016-8869

Proof-of-concept code and exploit modules indexed by Sploitus

Exploit for Improper Input Validation in Joomla Joomla\!
2025-07-27 mirrors_SecWikiGITEE
Exploit for OS Command Injection in Gnu Bash
2025-07-27 mirrors_XiphosResearchGITEE
Joomla Account Creation And Privilege Escalation
2024-08-31 Fabio Pires, Vitor Oliveira, Filipe Reis, metasploit.comPACKETSTORMRuby
Exploit for Improper Input Validation in Joomla Joomla\!
2020-10-21 小义的爸爸GITEE
Exploit for Improper Input Validation in Joomla Joomla\!
2020-09-13 chenGITEE
Exploit for Improper Input Validation in Joomla Joomla\!
2020-05-26 CysecGITEE
Exploit for Improper Input Validation in Joomla Joomla\!
2020-03-11 朽木GITEE
Exploit for Improper Input Validation in Joomla Joomla\!
2019-10-09 KTF_songGITEE
Exploit for Improper Input Validation in Joomla Joomla\!
2018-02-23 daikerGITEE
Joomla! 3.4.4 < 3.6.4 - Account Creation / Privilege Escalation
2016-10-27 Xiphos Research LtdEXPLOITDBPHP
Joomla 3.4.4 - 3.6.4 - Account Creation / Privilege Escalation Exploit
2016-10-27 Xiphos ResearchZDTPHP
Joomla Account Creation and Privilege Escalation
2016-10-27 Fabio Pires <fp@integrity.pt>, Filipe Reis <fr@integrity.pt>, Vitor Oliveira <vo@integrity.pt>METASPLOITRuby
Joomla 3.4.4 - 3.6.3 not authorized to create user vulnerability
2016-10-26 t1m30ffSEEBUGPython
Joomla : 3.4.4 - 3.6.3 privilege elevation vulnerability
2016-10-26 RootSEEBUGPython