PT-2019-7748 · Cysteme · Cysteme-Finder Plugin

To-Mos · Publicado 2019-09-13 · Atualizado 2019-09-13 · CVE-2016-10955

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions cysteme-finder plugin versions prior to 1.4

Description The issue is related to unrestricted file upload due to incorrect session tracking. This allows for potential security breaches.

Recommendations For versions prior to 1.4, update to version 1.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the file upload functionality until the update is applied.

Exploit

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2016-10955

Produtos afetados

Cysteme-Finder Plugin

Referências · 5

• 🔥 https://wpvulndb.com/vulnerabilities/8612 · Exploit
• https://t.me/cibsecurity/6735 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2016-10955 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-10955 · Nota de Segurança
• https://wordpress.org/plugins/cysteme-finder/#developers · Nota