2 matches found
Cross site request forgery (csrf)
Kliqqi 3.0.0.5 allows CSRF with resultant Arbitrary File Upload because module.php?module=upload can be used to configure the uploading of .php files, and then modules/upload/uploadmain.php can be used for the upload itself...
6.8CVSS7.2AI score0.00669EPSS
SaveExploits1References2Affected Software1
CVE-2016-10756
Kliqqi 3.0.0.5 allows CSRF with resultant Arbitrary File Upload because module.php?module=upload can be used to configure the uploading of .php files, and then modules/upload/uploadmain.php can be used for the upload itself...
8.8AI score0.00669EPSS
SaveExploits1References2
20