{"uuid": "65b9927c-4991-4f61-b73d-b52f140ccb9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-8869", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/joomla_registration_privesc.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Fabio Pires \", \"Filipe Reis \", \"Vitor Oliveira \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module creates an arbitrary account with administrative privileges in Joomla versions 3.4.4\\n          through 3.6.3. If an email server is configured in Joomla, an email will be sent to activate the account (the account is disabled by default).\", \"disclosure_date\": \"2016-10-25\", \"fullname\": \"auxiliary/admin/http/joomla_registration_privesc\", \"is_install_path\": true, \"mod_time\": \"2026-04-15 11:57:01 +0000\", \"name\": \"Joomla Account Creation and Privilege Escalation\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\", \"config-changes\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/admin/http/joomla_registration_privesc.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"admin/http/joomla_registration_privesc\", \"references\": [\"CVE-2016-8869\", \"CVE-2016-8870\", \"URL-https://developer.joomla.org/security-centre/660-20161002-core-elevated-privileges.html\", \"URL-https://developer.joomla.org/security-centre/659-20161001-core-account-creation.html\", \"URL-https://medium.com/@showthread/joomla-3-6-4-account-creation-elevated-privileges-write-up-and-exploit-965d8fb46fa2\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:46.719475Z"}