CVE-2016-10958

Mô tả

Tham khảo

• estatik.net/estatik-released-security-updates · Vendor Advisory
• wordpress.org/plugins/estatik · Release Notes
• pluginvulnerabilities.com/2016/08/01/arbitrary-file-upload-vulnerability-in-estatik · Exploit

Lỗ hổng khác của estatik

• CVE-2023-6050TRUNG BÌNH 6.1The Estatik Real Estate Plugin WordPress plugin before 4.1.1 does not sanitise and escape various parameters and generated URLs before outpu…
• CVE-2023-6049NGHIÊM TRỌNG 9.8The Estatik Real Estate Plugin WordPress plugin before 4.1.1 unserializes user input via some of its cookies, which could allow unauthentica…
• CVE-2023-6048TRUNG BÌNH 6.5The Estatik Real Estate Plugin WordPress plugin before 4.1.1 does not prevent user with low privileges on the site, like subscribers, from s…
• CVE-2016-10959TRUNG BÌNH 6.5The estatik plugin before 2.3.1 for WordPress has authenticated arbitrary file upload (exploitable with CSRF) via es_media_images[] to wp-ad…