What’s Vulnerable › Vulnerabilities

CVE-2016-10759

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-05-24 · updated 2026-06-17
• Weakness: CWE-22

Description

The Xinha plugin in Precurio 2.1 allows Directory Traversal, with resultant arbitrary code execution, via ExtendedFileManager/Classes/ExtendedFileManager.php because ExtendedFileManager can be used to rename the .htaccess file that blocks .php uploads.

Affected products

• Precurio: 2.1

References

• https://blog.ripstech.com/2016/precurio-remote-command-execution-via-xinha-plugin/
• https://demo.ripstech.com/projects/precurio_2.1
• https://blog.ripstech.com/2016/precurio-remote-command-execution-via-xinha-plugin/
• https://demo.ripstech.com/projects/precurio_2.1

Get alerted when CVE-2016-10759 or the next vulnerability affects your stack