The com_users profile.save task never checked that the visitor was logged in. An unauthenticated visitor could submit the profile form and get a new user account created, even on sites with user registration disabled. This vulnerability affects the following application versions: Joomla 2.5.0 Joomla 2.5.1 Joomla 2.5.2 Joomla 2.5.3 Joomla 2.5.4... Weiterlesen: Unauthorized User Account Creation in Joomla Profile Save Controller
Intelligence View
⚡ tsecurity.de Intelligence
Unauthorized User Account Creation in Joomla Profile Save Controller
The com_users profile.save task never checked that the visitor was logged in. An unauthenticated visitor could submit the profile form and get a new user…