SecuritySpace - CVE-2016-9838

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2016-9838

Description: An issue was discovered in components/com_users/models/registration.php in Joomla! before 3.6.5. Incorrect filtering of registration form data stored to the session on a validation error enables a user to gain access to a registered user's account and reset the user's group mappings, username, and password, as demonstrated by submitting a form that targets the `registration.register` task.

Test IDs: 1.3.6.1.4.1.25623.1.0.809765

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2016-9838
BugTraq ID: 94893
http://www.securityfocus.com/bid/94893
https://www.exploit-db.com/exploits/41157/

CVE ID:	CVE-2016-9838
Description:	An issue was discovered in components/com_users/models/registration.php in Joomla! before 3.6.5. Incorrect filtering of registration form data stored to the session on a validation error enables a user to gain access to a registered user's account and reset the user's group mappings, username, and password, as demonstrated by submitting a form that targets the `registration.register` task.
Test IDs:	1.3.6.1.4.1.25623.1.0.809765
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-9838 BugTraq ID: 94893 http://www.securityfocus.com/bid/94893 https://www.exploit-db.com/exploits/41157/