UpHeron
All vulnerabilities

Servers and applications

CVE-2016-8870

The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4, when registration has been disabled, allows remote attackers to create user accounts by leveraging failure to check the Allow User Registration configuration setting.

Severity
High 8.1
Published
4 Nov 2016
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
Joomla!Servers and applications · cpe:a:joomla:joomla\!
  • Every version up to 3.6.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2016-8870
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2016-8870