High severity7.5NVD Advisory· Published Dec 16, 2016· Updated May 6, 2026
CVE-2016-9838
CVE-2016-9838
Description
An issue was discovered in components/com_users/models/registration.php in Joomla! before 3.6.5. Incorrect filtering of registration form data stored to the session on a validation error enables a user to gain access to a registered user's account and reset the user's group mappings, username, and password, as demonstrated by submitting a form that targets the registration.register task.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.joomla.org/announcements/release-news/5693-joomla-3-6-5-released.htmlnvdPatchVendor Advisory
- www.securityfocus.com/bid/94893nvdThird Party AdvisoryVDB Entry
- www.exploit-db.com/exploits/41157/nvd
News mentions
0No linked articles in our index yet.