CVE-2016-10956-mail-masta

Mail Masta - Local File Read CVE-2016-10956 The mail-masta plugin 1.0 for WordPress has local file read in countofsend.php and csvexport.php. Usage $ ./CVE-2016-10956mailmasta.py -h + Mail Masta - Local File Read CVE-2016-10956 usage: CVE-2016-10956mailmasta.py -h -v -s -t TARGETURL -f FILE | -F...

WordPress Mail Masta 1.0 - Local File Inclusion Detection

WordPress Mail Masta 1.0 is susceptible to local file inclusion in countofsend.php and csvexport.php. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Mail Masta 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

CVE-2026-45263

«Live PoC verified 2026-04-30 against a stock FacturaScripts master at "127.0.0.1:8081". A low-privilege user "lowpriv" created a customer with "nombre = "=SUM1+1cmd|/c calc!A1"". An admin then exported "ListCliente" to CSV via "?action=export&option=CSV". The downloaded file contains the raw...

Exploit for Improper Input Validation in Mail-Masta_Project Mail-Masta

Mail Masta - Local File Read CVE-2016-10956...

Exploit for Improper Input Validation in Mail-Masta_Project Mail-Masta

Mail Masta - Local File Read CVE-2016-10956...

CVE-2016-10956

CVE-2016-10956 affects WordPress Mail Masta 1.0, with local file inclusion in count_of_send.php and csvexport.php. The Nuclei template and other sources confirm unauthenticated LFI (example PoC). Impact per sources: attacker can read server files, potentially leading to information disclosure. CV...

CVE-2016-10956: Improper Input Validation

The mail-masta plugin 1.0 for WordPress has local file inclusion in countofsend.php and csvexport.php...

Sql injection

A SQL injection issue was discovered in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects /inc/lists/csvexport.php Unauthenticated with the GET Parameter: listid...

CVE-2017-6095: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection issue was discovered in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects /inc/lists/csvexport.php Unauthenticated with the GET Parameter: listid...

PT-2017-16891

Name of the Vulnerable Software and Affected Versions Mail Masta plugin version 1.0 Description A SQL injection issue was discovered in the Mail Masta plugin for WordPress. This issue affects the /inc/lists/csvexport.php endpoint, specifically with the list id parameter, and can be exploited...

PT-2019-7749

Name of the Vulnerable Software and Affected Versions mail-masta plugin version 1.0 Description The issue concerns local file inclusion in the files count of send.php and csvexport.php. Recommendations For mail-masta plugin version 1.0, consider disabling access to the count of send.php and...