CVE-2016-10966

概要

参考情報

• mukarramkhalid.com/wordpress-real-3d-flipbook-plugin-exploit · Exploit
• wordpress.org/plugins/real3d-flipbook-lite · Release Notes

real3d flipbook のその他の脆弱性

• CVE-2016-10967中 6.1The real3d-flipbook-lite plugin 1.0 for WordPress has XSS via the wp-content/plugins/real3d-flipbook/includes/flipbooks.php bookId parameter…
• CVE-2016-10965高 7.5The real3d-flipbook-lite plugin 1.0 for WordPress has deleteBook=../ directory traversal for file deletion.