Joomla! before 2.5.3 allows Admin Account Creation.
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Link | Tags |
---|---|
http://www.openwall.com/lists/oss-security/2012/03/19/11 | third party advisory mailing list |
https://www.exploit-db.com/exploits/41156/ | third party advisory vdb entry |
https://developer.joomla.org/security/news/395-20120303-core-privilege-escalation.html | vendor advisory |