Unrestricted file upload in Najeebmedia Frontend File Manager
CVSS Skor
9.8
EPSS İhtimal
%5.7
Risk Skoru
0.6
Yayın
2 yıl önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
CVE-2016-15042 lab: Dockerized WordPress PoC for unauthenticated file upload in Frontend File Manager <4.0 and N‑Media Post Front‑end Form <1.1
Nuclei: WordPress Frontend File Manager < 4.0 & N-Media Post Frontend < 1.1 - Arbitrary File Upload
https://www.pluginvulnerabilities.com/2016/09/19/arbitrary-file-upload-vulnerability-in-front-end-file-upload-and-manager-plugin/
https://www.pluginvulnerabilities.com/2016/09/19/arbitrary-file-upload-vulnerability-in-n-media-post-front-end-form/
İlgili Benzer Açıklar
Improper privilege management in Najeebmedia Memberhero
Missing authentication in Najeebmedia Memberhero
Missing authorization in Najeebmedia Comments Extra Fields For Post, Pages And Cpt
Cross-site request forgery in Najeebmedia Comments Extra Fields For Post, Pages And Cpt
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2016-15042"