High severity8.8NVD Advisory· Published May 24, 2019· Updated Jun 17, 2026
CVE-2016-10756
CVE-2016-10756
Description
Kliqqi 3.0.0.5 allows CSRF with resultant Arbitrary File Upload because module.php?module=upload can be used to configure the uploading of .php files, and then modules/upload/upload_main.php can be used for the upload itself.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:kliqqi:kliqqi_cms:3.0.0.5:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:kliqqi:kliqqi_cms:3.0.0.5:*:*:*:*:*:*:*
- (no CPE)range: = 3.0.0.5
- Kliqqi/Kliqqidescription
Patches
Vulnerability mechanics
References
2- blog.ripstech.com/2016/kliqqi-from-cross-site-request-forgery-to-code-execution/nvdExploitThird Party Advisory
- demo.ripstech.com/projects/kliqqi_3.0.0.5nvdThird Party Advisory
News mentions
0No linked articles in our index yet.