漏洞描述 Joomla!是美国Open Source Matters团队的一套使用PHP和MySQL开发的开源、跨平台的内容管理系统(CMS)。</br>Joomla!3.6.4之前的版本中的Users组件中的controllers/user.php文件中的UsersModelRegistration类中的‘register’方法存在安全漏洞。远程攻击者可通过错误使用未过滤的数据利用该漏洞提升权限。
相关漏洞推荐 CNVD-2019-34135: Joomla configuration.php RCE POC CVE-2007-4504: Joomla! RSfiles <=1.0.2 - Local File Inclusion POC CVE-2008-4668: Joomla! Image Browser 0.1.5 rc2 - Local File Inclusion POC CVE-2008-4764: Joomla! <=2.0.0 RC2 - Local File Inclusion POC CVE-2008-6080: Joomla! ionFiles 4.4.2 - Local File Inclusion POC CVE-2008-6172: Joomla! Component RWCards 3.0.11 - Local File Inclusion POC CVE-2008-6222: Joomla! ProDesk 1.0/1.2 - Local File Inclusion POC CVE-2009-1496: Joomla! Cmimarketplace 0.1 - Local File Inclusion POC CVE-2009-2015: Joomla! MooFAQ 1.0 - Local File Inclusion POC CVE-2009-2100: Joomla! JoomlaPraise Projectfork 2.0.10 - Local File Inclusion POC CVE-2009-3053: Joomla! Agora 3.0.0b - Local File Inclusion POC CVE-2009-3318: Joomla! Roland Breedveld Album 1.14 - Local File Inclusion POC CVE-2009-4202: Joomla! Omilen Photo Gallery 0.5b - Local File Inclusion