Lucene search
+L

468 matches found

Packet Storm
Packet Storm
added 2020/08/17 12:00 a.m.247 views

Bludit 3.9.2 Authentication Bruteforce Mitigation Bypass

!/usr/bin/env ruby Title: Bludit 3.9.2 - Authentication Bruteforce Mitigation Bypass Author: noraj Alexandre ZANNI Author website: https://pwn.by/noraj/ Date: 2020-08-16 Vendor Homepage: https://www.bludit.com/ Software Link: https://github.com/bludit/bludit/archive/3.9.2.tar.gz Version: = 3.9.2...

4.3CVSS0.1AI score0.39598EPSS
SaveExploits9
Exploit DB
Exploit DB
added 2020/08/17 12:00 a.m.328 views

Bludit 3.9.2 - Authentication Bruteforce Mitigation Bypass

!/usr/bin/env ruby Title: Bludit 3.9.2 - Authentication Bruteforce Mitigation Bypass Author: noraj Alexandre ZANNI Author website: https://pwn.by/noraj/ Date: 2020-08-16 Vendor Homepage: https://www.bludit.com/ Software Link: https://github.com/bludit/bludit/archive/3.9.2.tar.gz Version: = 3.9.2...

9.8CVSS5.5AI score0.39598EPSS
SaveExploits9
CNVD
CNVD
added 2020/07/31 12:00 a.m.5 views

File Upload Vulnerability in Bludit CMS v3.13.0

Bludit CMS is a foreign multilingual lightweight website CMS system. Bludit CMS v3.13.0 suffers from a file upload vulnerability, which can be exploited by attackers to gain administrative privileges on the server...

7.2AI score
SaveExploits0
CNVD
CNVD
added 2020/07/31 12:00 a.m.9 views

Bludit Directory Traversal Vulnerability

Bludit is an open source, lightweight blog content management system CMS. A security vulnerability exists in Bludit version 3.9.2. A remote attacker can exploit this vulnerability to execute code with the help of the bl-kernel/ajax/upload-images.php file...

7.4AI score
SaveExploits0References1
CNVD
CNVD
added 2020/07/31 12:00 a.m.8 views

Arbitrary File Deletion Vulnerability in Bludit CMS v3.13.0

Bludit CMS is a foreign multilingual lightweight website CMS system. Bludit CMS v3.13.0 has an arbitrary file deletion vulnerability that allows attackers to delete arbitrary zip files...

7AI score
SaveExploits0
Packet Storm
Packet Storm
added 2020/07/27 12:00 a.m.176 views

Bludit 3.9.2 Directory Traversal

Title: Bludit 3.9.2 - Directory Traversal Author: James Green Date: 2020-07-20 Vendor Homepage: https://www.bludit.com Software Link: https://github.com/bludit/bludit Version: 3.9.2 Tested on: Linux Ubuntu 19.10 Eoan CVE: CVE-2019-16113 Special Thanks to Ali Faraj @InfoSecAli and authors of MSF...

6.5CVSS8.7AI score0.77962EPSS
SaveExploits16
zdt
zdt
added 2020/07/27 12:00 a.m.361 views

Bludit 3.9.2 - Directory Traversal Exploit

Exploit for multiple platform in category web applications Title: Bludit 3.9.2 - Directory Traversal Author: James Green Vendor Homepage: https://www.bludit.com Software Link: https://github.com/bludit/bludit Version: 3.9.2 Tested on: Linux Ubuntu 19.10 Eoan CVE: CVE-2019-16113 Special Thanks to...

6.5CVSS0.1AI score0.77962EPSS
SaveExploits16
Exploit DB
Exploit DB
added 2020/07/26 12:00 a.m.610 views

Bludit 3.9.2 - Directory Traversal

Title: Bludit 3.9.2 - Directory Traversal Author: James Green Date: 2020-07-20 Vendor Homepage: https://www.bludit.com Software Link: https://github.com/bludit/bludit Version: 3.9.2 Tested on: Linux Ubuntu 19.10 Eoan CVE: CVE-2019-16113 Special Thanks to Ali Faraj @InfoSecAli and authors of MSF...

8.8CVSS6.5AI score0.77962EPSS
SaveExploits16
GithubExploit
GithubExploit
added 2020/07/03 8:37 a.m.73 views

Exploit for Path Traversal in Bludit

Bludit Directory Traversal Vulnerability CVE-2019–16113 Blu...

8.8CVSS6.8AI score0.77962EPSS
SaveExploits16
CNVD
CNVD
added 2020/06/28 12:00 a.m.10 views

Bludit cross-site scripting vulnerability (CNVD-2021-22131)

Bludit is a simple, fast and secure flat file CMS. A stored cross-site scripting vulnerability exists in bl-kernel/ajax/logo-upload.php in Bludit 3.12.0. An attacker can exploit this vulnerability to inject arbitrary JavaScript and HTML code...

5.4CVSS5.7AI score0.0051EPSS
SaveExploits1References1
CNVD
CNVD
added 2020/06/28 12:00 a.m.11 views

Bludit Path Traversal Vulnerability

Bludit is an open source, lightweight blog content management system CMS. A path traversal vulnerability exists in Bludit version 3.12.0. An attacker can exploit this vulnerability to download arbitrary files with the help of the backup/plugin.php file...

4.9CVSS6.8AI score0.01299EPSS
SaveExploits1References1
OSV
OSV
added 2020/06/24 7:15 p.m.16 views

CVE-2020-15026

Bludit 3.12.0 allows admins to use a /plugin-backup-download?file=../ directory traversal approach for arbitrary file download via backup/plugin.php...

4.9CVSS7AI score
SaveExploits0References1
NVD
NVD
added 2020/06/24 7:15 p.m.51 views

CVE-2020-15026

Bludit 3.12.0 allows admins to use a /plugin-backup-download?file=../ directory traversal approach for arbitrary file download via backup/plugin.php...

4.9CVSS0.01299EPSS
SaveExploits1References1
Prion
Prion
added 2020/06/24 7:15 p.m.20 views

Directory traversal

Bludit 3.12.0 allows admins to use a /plugin-backup-download?file=../ directory traversal approach for arbitrary file download via backup/plugin.php...

4CVSS5.3AI score0.01299EPSS
SaveExploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2020/06/24 7:15 p.m.3 views

CVE-2020-15026

Bludit 3.12.0 allows admins to use a /plugin-backup-download?file=../ directory traversal approach for arbitrary file download via backup/plugin.php...

4.9CVSS5.4AI score0.01299EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2020/06/24 6:42 p.m.26 views

CVE-2020-15026

Bludit 3.12.0 allows admins to use a /plugin-backup-download?file=../ directory traversal approach for arbitrary file download via backup/plugin.php...

5.3AI score0.01299EPSS
SaveExploits1References1
CVE
CVE
added 2020/06/24 6:42 p.m.58 views

CVE-2020-15026

CVE-2020-15026 affects Bludit 3.12.0, where a directory traversal flaw in backup/plugin.php can be triggered via the /plugin-backup-download?file=../ parameter to enable arbitrary file download. The cited sources describe the vulnerability as a path traversal in the Bludit backup plugin, enabling...

4.9CVSS5.2AI score0.01299EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2020/06/24 11:15 a.m.26 views

CVE-2020-15006

Bludit 3.12.0 allows stored XSS via JavaScript code in an SVG document to bl-kernel/ajax/logo-upload.php...

5.4CVSS5.6AI score
SaveExploits0References1
NVD
NVD
added 2020/06/24 11:15 a.m.21 views

CVE-2020-15006

Bludit 3.12.0 allows stored XSS via JavaScript code in an SVG document to bl-kernel/ajax/logo-upload.php...

5.4CVSS0.0051EPSS
SaveExploits1References1
Prion
Prion
added 2020/06/24 11:15 a.m.21 views

Cross site scripting

Bludit 3.12.0 allows stored XSS via JavaScript code in an SVG document to bl-kernel/ajax/logo-upload.php...

3.5CVSS5.1AI score0.0051EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder