CVE-2016-10956-mail-masta

Mail Masta - 로컬 파일 읽기 CVE-2016-10956 WordPress용 mail-masta 플러그인 1.0은 countofsend.php와 csvexport.php에서 로컬 파일 읽기 취약점이 있습니다. 사용법 $ ./CVE-2016-10956mailmasta.py -h + Mail Masta - Local File Read CVE-2016-10956 usage: CVE-2016-10956mailmasta.py -h -v -s -t TARGETURL -f FILE | -F FILELIST -D DUMPDIR -k...

Exploit for Improper Input Validation in Mail-Masta_Project Mail-Masta

Mail Masta - Local File Read CVE-2016-10956...

Exploit for Improper Input Validation in Mail-Masta_Project Mail-Masta

Mail Masta - Local File Read CVE-2016-10956...

CVE-2016-10956

CVE-2016-10956 affects WordPress Mail Masta 1.0, with local file inclusion in count_of_send.php and csvexport.php. The Nuclei template and other sources confirm unauthenticated LFI (example PoC). Impact per sources: attacker can read server files, potentially leading to information disclosure. CV...

CVE-2016-10956: Improper Input Validation

The mail-masta plugin 1.0 for WordPress has local file inclusion in countofsend.php and csvexport.php...

Sql injection

A SQL injection issue was discovered in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects /inc/lists/csvexport.php Unauthenticated with the GET Parameter: listid...

PT-2017-16891

Name of the Vulnerable Software and Affected Versions Mail Masta plugin version 1.0 Description A SQL injection issue was discovered in the Mail Masta plugin for WordPress. This issue affects the /inc/lists/csvexport.php endpoint, specifically with the list id parameter, and can be exploited...

CVE-2017-6095: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection issue was discovered in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects /inc/lists/csvexport.php Unauthenticated with the GET Parameter: listid...

PT-2019-7749

Name of the Vulnerable Software and Affected Versions mail-masta plugin version 1.0 Description The issue concerns local file inclusion in the files count of send.php and csvexport.php. Recommendations For mail-masta plugin version 1.0, consider disabling access to the count of send.php and...