CVE-2016-8870

The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4, when registration has been disabled, allows remote attackers to create user accounts by leveraging failure to check the Allow User Registration configuration setting.

• CWE-20

• http://www.rapid7.com/db/modules/auxiliary/admin/http/joomla_registration_privescThird Party Advisory
• http://www.securityfocus.com/bid/93876Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037107
• http://www.securitytracker.com/id/1037108Third Party Advisory, VDB Entry
• https://blog.sucuri.net/2016/10/details-on-the-privilege-escalation-vulnerability-in-joomla.html
• https://developer.joomla.org/security-centre/659-20161001-core-account-creation.htmlVendor Advisory
• https://github.com/joomla/joomla-cms/commit/bae1d43938c878480cfd73671e4945211538fdcfPatch
• https://medium.com/%40showthread/joomla-3-6-4-account-creation-elevated-privileges-write-up-and-exploit-965d8fb46fa2#.rq4qh1v4r
• https://www.exploit-db.com/exploits/40637/Exploit, Third Party Advisory
• http://www.rapid7.com/db/modules/auxiliary/admin/http/joomla_registration_privescThird Party Advisory
• http://www.securityfocus.com/bid/93876Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037107
• http://www.securitytracker.com/id/1037108Third Party Advisory, VDB Entry
• https://blog.sucuri.net/2016/10/details-on-the-privilege-escalation-vulnerability-in-joomla.html
• https://developer.joomla.org/security-centre/659-20161001-core-account-creation.htmlVendor Advisory
• https://github.com/joomla/joomla-cms/commit/bae1d43938c878480cfd73671e4945211538fdcfPatch
• https://medium.com/%40showthread/joomla-3-6-4-account-creation-elevated-privileges-write-up-and-exploit-965d8fb46fa2#.rq4qh1v4r
• https://www.exploit-db.com/exploits/40637/Exploit, Third Party Advisory

Published

Nov 4, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-8862The AcquireMagickMemory function in MagickCore/memory.c in I…8.8
• CVE-2016-8863Heap-based buffer overflow in the create_url_list function i…
• CVE-2016-8864named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-…7.5
• CVE-2016-8866The AcquireMagickMemory function in MagickCore/memory.c in I…8.8
• CVE-2016-8867Docker Engine 1.12.2 enabled ambient capabilities with misco…
• CVE-2016-8869The register method in the UsersModelRegistration class in c…
• CVE-2016-8871In Botan 1.11.29 through 1.11.32, RSA decryption with certai…
• CVE-2016-8875The ConvertToPDF plugin in Foxit Reader and PhantomPDF befor…
• CVE-2016-8876Out-of-Bounds read vulnerability in Foxit Reader and Phantom…
• CVE-2016-8877Heap buffer overflow (Out-of-Bounds write) vulnerability in …
• CVE-2016-8878Out-of-Bounds read vulnerability in Foxit Reader and Phantom…
• CVE-2016-8879The thumbnail shell extension plugin (FoxitThumbnailHndlr_x8…