Most unpatched Joomla sites compromised in latest wave of attacks
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2016-8869+1 related CVE | The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4 allows remote attackers to gain… | 9.8 group max | 97% | PoC ×2 |
From the original article
1 min read at helpnetsecurity.com
If you run a Joomla-based website and you haven’t implemented the latest security release of the CMS, your site has been almost surely compromised. According to Sucuri CTO Daniel Cid, every Joomla site on the company’s network was hit with exploitation attempts within three days after the release of the update (v3. 6.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.