CVE-2016-10756

CVE-2016-10756 affects Kliqqi 3.0.0.5. A CSRF flaw enables configuring the upload of PHP files via module.php?module=upload and then using modules/upload/upload_main.php to perform the upload, resulting in Arbitrary File Upload. The Red Hat advisory and CNVD/CVE records corroborate a CSRF path le...