Entreprise d'experts en Sécurité Informatique : Audits et conseils en cybersécurité
Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com


CVE-2016-10956

Description

The mail-masta plugin 1.0 for WordPress has local file inclusion in count_of_send.php and csvexport.php.

POC

Reference

- https://cxsecurity.com/issue/WLB-2016080220

- https://wpvulndb.com/vulnerabilities/8609

Github

- https://github.com/1337kid/Exploits

- https://github.com/20142995/nuclei-templates

- https://github.com/ARPSyndicate/cvemon

- https://github.com/ARPSyndicate/kenzer-templates

- https://github.com/El-Palomo/SYMFONOS

- https://github.com/Hackhoven/wp-mail-masta-exploit

- https://github.com/p0dalirius/CVE-2016-10956-mail-masta

- https://github.com/p0dalirius/p0dalirius