CVE-2018-1000811

2018-12-2015:29:00

Google

osv.dev

7 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.7%

JSON

bludit version 3.0.0 contains a Unrestricted Upload of File with Dangerous Type vulnerability in Content Upload in Pages Editor that can result in Remote Command Execution. This attack appear to be exploitable via malicious user have to upload a crafted payload containing PHP code.

CPENameOperatorVersion
bluditeq0.6.2
bluditeq0.7-beta1
bluditeq2.0-beta4
bluditeq2.0-beta5
bluditeq3.0.0-beta-2
bluditeq0.7.1
bluditeq0.4-beta1
bluditeq0.6-beta1
bluditeq1.0.1
bluditeq1.3-beta1

Name	Operator	Version
bludit	eq	0.6.2
bludit	eq	0.7-beta1
bludit	eq	2.0-beta4
bludit	eq	2.0-beta5
bludit	eq	3.0.0-beta-2
bludit	eq	0.7.1
bludit	eq	0.4-beta1
bludit	eq	0.6-beta1
bludit	eq	1.0.1
bludit	eq	1.3-beta1