CVE-2016-10956
HIGH NUCLEImail-masta 1.0 - Local File Inclusion in count_of_send.php and csvexport.php
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2016-10956. PoCs published by p0dalirius, Hackhoven. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a functional Python exploit for CVE-2016-10956, which is a local file read vulnerability in the Mail Masta WordPress plugin. The exploit leverages a path traversal flaw in `count_of_send.php` to read arbitrary files from the server.
Description
The mail-masta plugin 1.0 for WordPress has local file inclusion in count_of_send.php and csvexport.php.
Exploits (3)
This repository contains a functional Python exploit for CVE-2016-10956, which is a local file read vulnerability in the Mail Masta WordPress plugin. The exploit leverages a path traversal flaw in `count_of_send.php` to read arbitrary files from the server.
This repository contains a functional Python script that exploits CVE-2016-10956, a Local File Inclusion (LFI) vulnerability in WordPress Plugin Mail Masta 1.0, to extract MySQL credentials from wp-config.php. The exploit uses both direct file inclusion and base64 encoding techniques to bypass restrictions.
This repository contains a functional Python exploit for CVE-2016-10956, a local file read vulnerability in the Mail Masta WordPress plugin. The exploit leverages a path traversal flaw in `count_of_send.php` to read arbitrary files from the target system via base64-encoded responses.
Nuclei Templates (1)
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N