The beauty-premium theme 1.0.8 for WordPress has CSRF with resultant arbitrary file upload in includes/sendmail.php.
References
Link | Resource |
---|---|
https://www.exploit-db.com/exploits/39552 | Exploit Third Party Advisory VDB Entry |
https://wpvulndb.com/vulnerabilities/8412 | Third Party Advisory |
Configurations
Information
Published : 2019-09-20 08:15
Updated : 2019-09-20 10:59
NVD link : CVE-2016-10997
Mitre link : CVE-2016-10997
JSON object : View
CWE
CWE-352
Cross-Site Request Forgery (CSRF)
Products Affected
yourinspirationweb
- beauty-premium