Логотип exploitDog
bind:CVE-2016-10756
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2016-10756

Количество 2

Количество 2

nvd логотип

CVE-2016-10756

больше 6 лет назад

Kliqqi 3.0.0.5 allows CSRF with resultant Arbitrary File Upload because module.php?module=upload can be used to configure the uploading of .php files, and then modules/upload/upload_main.php can be used for the upload itself.

CVSS3: 8.8
EPSS: Низкий
github логотип

GHSA-xp2m-mr92-wfjx

больше 3 лет назад

Kliqqi 3.0.0.5 allows CSRF with resultant Arbitrary File Upload because module.php?module=upload can be used to configure the uploading of .php files, and then modules/upload/upload_main.php can be used for the upload itself.

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2016-10756

Kliqqi 3.0.0.5 allows CSRF with resultant Arbitrary File Upload because module.php?module=upload can be used to configure the uploading of .php files, and then modules/upload/upload_main.php can be used for the upload itself.

CVSS3: 8.8
0%
Низкий
больше 6 лет назад
github логотип
GHSA-xp2m-mr92-wfjx

Kliqqi 3.0.0.5 allows CSRF with resultant Arbitrary File Upload because module.php?module=upload can be used to configure the uploading of .php files, and then modules/upload/upload_main.php can be used for the upload itself.

CVSS3: 8.8
0%
Низкий
больше 3 лет назад

Уязвимостей на страницу