CVE-2016-10756

Mô tả

Tham khảo

• blog.ripstech.com/2016/kliqqi-from-cross-site-request-forgery-to-code-execution · Exploit
• demo.ripstech.com/projects/kliqqi_3.0.0.5 · Third Party Advisory

Lỗ hổng khác của kliqqi cms

• CVE-2024-48700CAO 7.2Kliqqi-CMS has a background arbitrary code execution vulnerability that attackers can exploit to implant backdoors or getShell via the edit_…
• CVE-2024-31673NGHIÊM TRỌNG 9.8Kliqqi-CMS 2.0.2 is vulnerable to SQL Injection in load_data.php via the userid parameter.
• CVE-2020-21119NGHIÊM TRỌNG 9.8SQL Injection vulnerability in Kliqqi-CMS 2.0.2 in admin/admin_update_module_widgets.php in recordIDValue parameter, allows attackers to gai…
• CVE-2020-21121NGHIÊM TRỌNG 9.8Pligg CMS 2.0.2 contains a time-based SQL injection vulnerability via the $recordIDValue parameter in the admin_update_module_widgets.php fi…
• CVE-2018-11405CAO 8.8Kliqqi 2.0.2 has CSRF in admin/admin_users.php.