vulnerability
FreeBSD: VID-a27d234a-c7f2-11e6-ae1b-002590263bf5 (CVE-2016-8870): Joomla! -- multiple vulnerabilities
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:M/Au:N/C:P/I:P/A:P) | Dec 22, 2016 | Dec 22, 2016 | Mar 25, 2026 |
Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
Dec 22, 2016
Added
Dec 22, 2016
Modified
Mar 25, 2026
Description
The JSST and the Joomla! Security Center report: [20161001] - Core - Account Creation Inadequate checks allows for users to register on a site when registration has been disabled. [20161002] - Core - Elevated Privilege Incorrect use of unfiltered data allows for users to register on a site with elevated privileges. [20161003] - Core - Account Modifications Incorrect use of unfiltered data allows for existing user accounts to be modified; to include resetting their username, password, and user group assignments.
Solution
freebsd-upgrade-package-joomla3
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.