CVE-2016-1000112

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

Unauthenticated remote .jpg file upload in contus-video-comments v1.0 wordpress plugin

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published
Oct 6, 2016
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2016

CVE-2016-10001139.8XSS and SQLi in huge IT gallery v1.1.5 for JoomlaCVE-2016-10001146.1XSS in huge IT gallery v1.1.5 for JoomlaCVE-2016-10001157.2Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSSCVE-2016-10001167.2Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSSCVE-2016-10001177.2XSS & SQLi in HugeIT slideshow v1.0.4CVE-2016-10001187.2XSS & SQLi in HugeIT slideshow v1.0.4CVE-2016-10001197.2SQLi and XSS in Huge IT catalog extension v1.0.4 for JoomlaCVE-2016-10001207.2SQLi and XSS in Huge IT catalog extension v1.0.4 for JoomlaCVE-2016-10001214.8XSS and SQLi in Huge IT Joomla Slider v1.0.9 extensionCVE-2016-10001227.2XSS and SQLi in Huge IT Joomla Slider v1.0.9 extensionCVE-2016-10001239.8Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for JoomlaCVE-2016-10001249.8Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6
CVE-2016-1000112: Critical severity, CVSS 9.1 | Vulnix