CVE-2016-9837

An issue was discovered in templates/beez3/html/com_content/article/default.php in Joomla! before 3.6.5. Inadequate permissions checks in the Beez3 layout override of the com_content article view allow users to view articles that should not be publicly accessible, as demonstrated by an index.php?option=com_content&view=article&id=1&template=beez3 request.

We have discovered 202,934 live websites that are affected by CVE-2016-9837.

Run a Free Instant Scan



Affected Software

Product  Joomla
Category Content Management System
Vulnerable Domains202,934 live websites (99% of Joomla install base)
Vulnerable Versions
  • from 0 through 3.6.5
Vulnerable Versions Count46 versions ( 45% of all versions)



Details

  • Published - Dec 16, 2016
  • Updated - Aug 6, 2024

Website Distribution by Country

Number of websites using CVE-2016-9837
United States15,297 websites


Italy51,659 websites
Russia15,116 websites
GB12,270 websites
Poland12,209 websites
Germany11,802 websites
Netherlands8,476 websites
Australia6,609 websites
South Africa6,344 websites
France5,162 websites

Website Distribution by TLD

Number of websites using CVE-2016-9837
.com50,232 websites
.it33,806 websites
.ru12,699 websites
.pl8,680 websites
.org6,422 websites
.de5,950 websites
.co.uk5,886 websites
.nl5,854 websites
.com.au4,724 websites
.net4,606 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2016-9837

Top websites that are affected by CVE-2016-9837. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*****************.de Germany*,***
*******.**.ca Canada*,***
***********.**.za South Africa**,***
**************.se Sweden**,***
***************.com Italy**,***
*********.com GB**,***
************.com United States**,***
*****.**.uk GB**,***
************.com Germany**,***
*********************.com United States**,***
See full domain list

FAQ

A total of 202,934 websites have been identified as vulnerable to CVE-2016-9837, based on global website indexing conducted by WebTechSurvey.
The Joomla is affected by the CVE-2016-9837 vulnerability.
Joomla versions up to and including 3.6.5 are vulnerable to CVE-2016-9837.