CVE-2016-1000156

Critical

Published: 14/12/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2016-1000156 is a vulnerability related to an incomplete fix for remote file upload in Mailcwp version 1.100. It allows attackers to upload malicious files to the server.

Risk Assessment

Organizations may be exposed to attacks that lead to remote code execution or server takeover, potentially resulting in data loss or security breaches.

Recommendation

It is recommended to upgrade to the latest version of Mailcwp that includes complete fixes for this vulnerability. A security audit of the system should also be conducted.

Original NVD description (English source)

Mailcwp remote file upload vulnerability incomplete fix v1.100