442 matches found
CVE-2024-25297
CVE-2024-25297 is a Cross Site Scripting (XSS) vulnerability in Bludit CMS 3.15 exploitable via the endpoint edit-content.php . Multiple connected sources describe that remote attackers can execute arbitrary code and access sensitive information through this vector. Exploitation details in public...
Bludit Security Breach
Bludit is an open source lightweight blog content management system CMS. A security vulnerability exists in Bludit CMS version 3.15, which stems from a cross-site scripting XSS vulnerability in the file edit-content.php...
PT-2024-20868 · Unknown · Bludit Cms
Name of the Vulnerable Software and Affected Versions: Bludit CMS version 3.15 Description: A Cross Site Scripting XSS issue allows remote attackers to execute arbitrary code and obtain sensitive information via the "edit-content.php" endpoint. The estimated number of potentially affected devices...
CVE-2023-24674
Permissions vulnerability found in Bludit CMS v.4.0.0 allows local attackers to escalate privileges via the role:admin parameter...
CVE-2023-24674
Permissions vulnerability found in Bludit CMS v.4.0.0 allows local attackers to escalate privileges via the role:admin parameter...
CVE-2023-24674
Permissions vulnerability found in Bludit CMS v.4.0.0 allows local attackers to escalate privileges via the role:admin parameter...
Design/Logic Flaw
Permissions vulnerability found in Bludit CMS v.4.0.0 allows local attackers to escalate privileges via the role:admin parameter...
Bludit CMS Security Vulnerability
Bludit is an open source lightweight blog content management system CMS. A security vulnerability exists in Bludit CMS version v.4.0.0, which stems from a vulnerability that allows a local attacker to escalate privileges via the role:admin parameter...
CVE-2023-24674
Permissions vulnerability found in Bludit CMS v.4.0.0 allows local attackers to escalate privileges via the role:admin parameter...
CVE-2023-24674
Permissions vulnerability found in Bludit CMS v.4.0.0 allows local attackers to escalate privileges via the role:admin parameter...
PT-2023-19732 · Unknown · Bludit Cms
Name of the Vulnerable Software and Affected Versions: Bludit CMS version 4.0.0 Description: A permissions issue allows local attackers to escalate privileges via the role:admin parameter. This issue can be exploited by attackers to gain elevated access. Recommendations: For Bludit CMS version...
CVE-2023-24674
The CVE-2023-24674 entry concerns Bludit CMS v4.0.0, where a permissions vulnerability allows local attackers to escalate privileges via the role:admin parameter. The issue is categorized with a high impact per the metrics (CVSS v3.1: Local access, Privileges Required Low, User Interaction None, ...
CVE-2020-20210
Bludit 3.9.2 is vulnerable to Remote Code Execution RCE via /admin/ajax/upload-images...
CVE-2020-20210
Bludit 3.9.2 is vulnerable to Remote Code Execution RCE via /admin/ajax/upload-images...
Remote code execution
Bludit 3.9.2 is vulnerable to Remote Code Execution RCE via /admin/ajax/upload-images...
Bludit Arbitrary File Download
-- coding: utf-8 -- /usr/bin/env python Exploit Title: Bludit 3.13.1 Backup Plugin - Arbitrary File Download Authenticated Date: 2022-07-21 Exploit Author: Antonio Cuomo arkantolo Vendor Homepage: https://www.bludit.com Software Link: https://github.com/bludit/bludit Version: 3.13.1 Tested on:...
Bludit 代码问题漏洞
Bludit is an open source lightweight blog content management system CMS. A security vulnerability exists in Bludit version 3.9.2, which stems from vulnerability to Remote Code Execution RCE attacks via /admin/ajax/upload-images...
PT-2023-11548 · Bludit · Bludit
Name of the Vulnerable Software and Affected Versions: Bludit version 3.9.2 Description: The issue allows for Remote Code Execution RCE via the "/admin/ajax/upload-images" API endpoint. This means an attacker could potentially execute malicious code on the server. Recommendations: For Bludit...
Bludit < 3.13.1 Backup Plugin - Arbitrary File Download (Authenticated) Exploit
-- coding: utf-8 -- /usr/bin/env python Exploit Title: Bludit 3.13.1 Backup Plugin - Arbitrary File Download Authenticated Date: 2022-07-21 Exploit Author: Antonio Cuomo arkantolo Vendor Homepage: https://www.bludit.com Software Link: https://github.com/bludit/bludit Version: 3.13.1 Tested on:...