Description
Joomla! Core is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions by escalating their privileges due to a programming error. Joomla! Core versions 1.6.x ranging from 1.6.0 and up to and including 1.6.6 are vulnerable.
Remediation
Update to Joomla! Core version 2.5.3 or latest
References
http://jeffchannell.com/Joomla/joomla-161725-privilege-escalation-vulnerability.html
https://www.exploit-db.com/exploits/41156/
https://developer.joomla.org/security-centre/395-20120303-core-privilege-escalation.html