High Severity Joomla Vulnerability Patched

On the 25th of October 2016, the Joomla team issued a patch for a high severity security flaw that could allow a remote unauthenticated attacker to create administrative accounts on the target system. AppCheck was updated on the same day to detect and safely exploit the vulnerability.

On the 25th of October 2016, the Joomla team issued a patch for a high severity security flaw that could allow a remote unauthenticated attacker to create administrative accounts on the target system. AppCheck was updated on the same day to detect and safely exploit the vulnerability.

Our security researchers observed scanning for this flaw against our honeypot systems within 24 hours of the initial disclosure, a common trend with popular CMS systems.

It is recommended that all Joomla installations should be updated immediately to version 3.6.4 or later.

https://www.joomla.org/announcements/release-news/5678-joomla-3-6-4-released.html

AppCheck can be used now to scan your environment for the vulnerability. If you don’t yet have an AppCheck account, use the Free Trial option to request an evaluation license.

Get started with Appcheck

No software to download or install.

Contact us or call us 0113 887 8380

Start your free trial

Further Reading

About AppCheck

AppCheck is a software security vendor based in the UK, offering a leading security scanning platform that automates the discovery of security flaws within organisations websites, applications, network and cloud infrastructure. AppCheck are authorised by the Common Vulnerabilities and Exposures (CVE) Program as a CVE Numbering Authority (CNA)

Put us to the test.
Try AppCheck for free

No software to download or install.
Contact us or call us 0113 887 8380
Start your free trial
"AppCheck’s coverage is extensive, ensuring that no area is left unaddressed, even in complex architectures with intricate authentication systems."
"Gone are the weeks of liaising with vendors and honing scan profiles to produce a once a year report. Regular automated scheduled scans means we can relax while AppCheck does the heavy lifting."
"Comprehensive, competitively priced, easy to use tool with simple onboarding and excellent support."
"Their support team offer useful guidance on getting the best out of the tool, as well as keeping us updated with the latest threats and security news."
"Comprehensive, competitively priced, easy to use tool with simple onboarding and excellent support."
"The detailed reports and actionable insights provided have proven invaluable in enhancing our overall security posture. Highly recommended for robust and effective security assessments."
"The competence of its results truly stands out when compared to other scanners I've used in the past and even manual penetration tests. It’s very user-friendly too for such a complex tool."
"When we compared AppCheck against a team of manual penetration testers, AppCheck identified all of the same vulnerabilities, plus an additional three critical vulnerabilities and did so in under half the time."
Services
Company
Resources
Keep in touch

AppCheck Ltd. is a company registered in England and Wales with company number 06888174

Start your free trial

Simply complete the form and we’ll send you all you need to activate AppCheck and undertake your FREE scan.
Your details
IP Addresses
URLs

Get in touch