Critical severity9.8NVD Advisory· Published May 24, 2019· Updated Jun 17, 2026
CVE-2016-10759
CVE-2016-10759
Description
The Xinha plugin in Precurio 2.1 allows Directory Traversal, with resultant arbitrary code execution, via ExtendedFileManager/Classes/ExtendedFileManager.php because ExtendedFileManager can be used to rename the .htaccess file that blocks .php uploads.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Precurio/Precuriodescription
- Range: <=2.1
Patches
Vulnerability mechanics
References
2- blog.ripstech.com/2016/precurio-remote-command-execution-via-xinha-plugin/nvdExploitThird Party Advisory
- demo.ripstech.com/projects/precurio_2.1nvdThird Party Advisory
News mentions
0No linked articles in our index yet.