CVE-2021-25808

A code injection vulnerability in backup/plugin.php of Bludit 3.13.1 allows attackers to execute arbitrary code via a crafted ZIP file...

CVE-2021-25808: Improper Control of Generation of Code

A code injection vulnerability in backup/plugin.php of Bludit 3.13.1 allows attackers to execute arbitrary code via a crafted ZIP file...

PT-2021-16798

Name of the Vulnerable Software and Affected Versions Bludit version 3.13.1 Description A code injection issue in the backup/plugin.php file allows attackers to execute arbitrary code via a crafted ZIP file. Recommendations For Bludit version 3.13.1, update to a version that fixes this issue to...

PT-2021-10944

Name of the Vulnerable Software and Affected Versions: Bludit version 3.12.0 Description: A file upload issue was found in the file path /bl-plugins/backup/plugin.php. If an attacker gains Administrator rights, they can use unsafe plugins to upload a backup file and control the server...

CVE-2020-15026

Bludit 3.12.0 allows admins to use a /plugin-backup-download?file=../ directory traversal approach for arbitrary file download via backup/plugin.php...

Directory traversal

Bludit 3.12.0 allows admins to use a /plugin-backup-download?file=../ directory traversal approach for arbitrary file download via backup/plugin.php...

CVE-2020-15026

Bludit 3.12.0 allows admins to use a /plugin-backup-download?file=../ directory traversal approach for arbitrary file download via backup/plugin.php...

CVE-2020-15026: Improper Limitation of a Pathname to a Restricted Directory

Bludit 3.12.0 allows admins to use a /plugin-backup-download?file=../ directory traversal approach for arbitrary file download via backup/plugin.php...

PT-2020-14127

Name of the Vulnerable Software and Affected Versions Bludit version 3.12.0 Description The issue allows admins to use a directory traversal approach for arbitrary file download via the "backup/plugin.php" file. This can be achieved by exploiting the "/plugin-backup-download?file=../" endpoint...