468 matches found
CVE-2020-15006
Bludit 3.12.0 allows stored XSS via JavaScript code in an SVG document to bl-kernel/ajax/logo-upload.php...
CVE-2020-15006
Bludit 3.12.0 allows stored XSS via JavaScript code in an SVG document to bl-kernel/ajax/logo-upload.php...
CVE-2020-15006
Bludit 3.12.0 is affected by a stored XSS in SVG content via bl-kernel/ajax/logo-upload.php. The vulnerability arises from JavaScript inside an SVG being stored and delivered to users, enabling arbitrary script execution in the context of other users. Public details in the provided documents conf...
Exploit for Path Traversal in Bludit
CVE-2019-16113 PoC Bludit = 3.9.2 Remote Code Execution Vuln...
Bludit 3.9.12 Directory Traversal
Exploit Title: Bludit 3.9.12 - Directory Traversal Date: 2020-06-05 Exploit Author: Luis Vacacas Vendor Homepage: https://www.bludit.com Software Link: https://github.com/bludit/bludit Version: = 3.9.12 Tested on: Ubuntu 19.10 CVE : CVE-2019-16113 !/usr/bin/env python3 -- coding: utf-8 -- import...
Bludit 3.9.12 - Directory Traversal
Exploit Title: Bludit 3.9.12 - Directory Traversal Date: 2020-06-05 Exploit Author: Luis Vacacas Vendor Homepage: https://www.bludit.com Software Link: https://github.com/bludit/bludit Version: = 3.9.12 Tested on: Ubuntu 19.10 CVE : CVE-2019-16113 !/usr/bin/env python3 -- coding: utf-8 -- import...
Bludit 3.9.12 - Directory Traversal Vulnerability
Exploit for php platform in category web applications Exploit Title: Bludit 3.9.12 - Directory Traversal Exploit Author: Luis Vacacas Vendor Homepage: https://www.bludit.com Software Link: https://github.com/bludit/bludit Version: = 3.9.12 Tested on: Ubuntu 19.10 CVE : CVE-2019-16113 !/usr/bin/en...
Exploit for Improper Restriction of Excessive Authentication Attempts in Bludit
CVE-2019-17240https://www.cvedetails.com/cve/CVE-2019-17240...
Bludit Cross-Site Scripting Vulnerability (CNVD-2020-35971)
Bludit is an open source, lightweight blog content management system CMS. A cross-site scripting vulnerability exists in the 'showAlert' function of the admin panel in Bludit version 3.12.0. The vulnerability stems from the WEB application's lack of proper validation of client-side data. An...
CVE-2020-13889
showAlert in the administration panel in Bludit 3.12.0 allows XSS...
CVE-2020-13889
showAlert in the administration panel in Bludit 3.12.0 allows XSS...
Cross site scripting
showAlert in the administration panel in Bludit 3.12.0 allows XSS...
CVE-2020-13889
Bludit 3.12.0 shows XSS in the admin panel via showAlert(). The root cause is lack of proper validation of client-side data, enabling attacker-controlled code execution in the browser (example payload: showAlert("alert(1)") from publicly available exploit discussion). No remediation details are p...
CVE-2020-13889
showAlert in the administration panel in Bludit 3.12.0 allows XSS...
Exploit for Cross-site Scripting in Bludit
Author: Andre k Lorenci Contact: [email protected] CVE-2020-1...
Exploit for Path Traversal in Bludit
CVE-2019-16113 CVE-2019-16113 - bludit = 3...
Exploit for Path Traversal in Bludit
CVE-2019-16113 This is a python implementaiton PoC for the Bl...
Bludit CMS Arbitrary File Upload (CVE-2019-16113)
An arbitrary file upload vulnerability has been reported in Bludit CMS. This vulnerability is due to improper validation of image uploads by upload-images.php. A remote authenticated attacker could exploit this vulnerability by sending a crafted request to Bludit CMS. Successful exploitation coul...
Bludit Cross-Site Scripting Vulnerability (CNVD-2020-13197)
Bludit is an open source, lightweight blog content management system CMS. A cross-site scripting vulnerability exists in Bludit version 3.10.0. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to execute...