CVE-2016-10758

Mô tả

Tham khảo

• blog.ripstech.com/2016/phpkit-code-exection-for-privileged-users · Third Party Advisory
• demo.ripstech.com/projects/phpkit_1.6.6 · Exploit

Lỗ hổng khác của phpkit

• CVE-2015-1052TRUNG BÌNH 4.3Cross-site scripting (XSS) vulnerability in the poll archive in PHPKIT 1.6.6 (Build 160014) allows remote attackers to inject arbitrary web …
• CVE-2008-7193TRUNG BÌNH 6.8PHPKIT 1.6.4 PL1 includes the session ID in the URL, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks by r…
• CVE-2007-6134CAO 7.5SQL injection vulnerability in pkinc/public/article.php in PHPKIT 1.6.4pl1 allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2006-7115CAO 7.5SQL injection vulnerability in PHPKit 1.6.1 RC2 allows remote attackers to inject arbitrary SQL commands via the catid parameter to include.…
• CVE-2007-0179CAO 7.5SQL injection vulnerability in comment.php in PHPKIT 1.6.1 R2 allows remote attackers to execute arbitrary SQL commands via the subid parame…