CVE-2016-9837

An issue was discovered in templates/beez3/html/com_content/article/default.php in Joomla! before 3.6.5. Inadequate permissions checks in the Beez3 layout override of the com_content article view allow users to view articles that should not be publicly accessible, as demonstrated by an index.php?option=com_content&view=article&id=1&template=beez3 request.

We have discovered 273,630 live websites that are affected by CVE-2016-9837.

Test my site



Affected Software

Product  Joomla
Category Content Management System
Vulnerable Domains273,630 live websites (98.51% of Joomla install base)
Vulnerable Versions
  • from 0 before 3.6.5
Vulnerable Versions Count62 versions ( 36.90% of all versions)



Details

  • Published - Dec 16, 2016
  • Updated - Aug 6, 2024

CVE-2016-9837 usage by Country

United States16,292 websites


Italy66,613 websites
Australia24,828 websites
GB16,750 websites
Germany14,450 websites
Russia14,418 websites
Poland12,826 websites
Netherlands11,568 websites
Iran9,246 websites
South Africa8,925 websites

CVE-2016-9837 usage by TLD

.com66,701 websites
.it43,763 websites
.com.au17,070 websites
.ru12,316 websites
.pl9,189 websites
.co.uk9,022 websites
.org7,529 websites
.de6,956 websites
.nl6,893 websites
.net5,906 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2016-9837

Top websites that are affected by CVE-2016-9837. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*****************.de Germany*,***
*******.**.ca Canada*,***
**************.********.com United States**,***
***********.com Italy**,***
***********.**.za South Africa**,***
********.com Serbia**,***
***************.com Italy**,***
********.com United States**,***
*********.com GB**,***
*****.**.uk GB**,***
See full domain list

FAQ

A total of 273,630 websites have been identified as vulnerable to CVE-2016-9837, discovered through global website indexing conducted by WebTechSurvey.
Joomla is susceptible to CVE-2016-9837 vulnerability.
Joomla versions before 3.6.5 are vulnerable to CVE-2016-9837.
Version 3.6.5 of Joomla addresses the CVE-2016-9837 security vulnerability.