CVE-2016-10759

2019-05-2417:41:57

mitre

www.cve.org

9.5 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.8%

JSON

The Xinha plugin in Precurio 2.1 allows Directory Traversal, with resultant arbitrary code execution, via ExtendedFileManager/Classes/ExtendedFileManager.php because ExtendedFileManager can be used to rename the .htaccess file that blocks .php uploads.