bludit Pages Editor 3.0.0 Arbitrary File Upload Vulnerability

Bludit is an open source and free lightweight blogging CMS Content Management System system.Pages Editor is one of the page editors. A security vulnerability exists in the content upload feature of Pages Editor in Bludit version 3.0.0, which stems from the program's failure to restrict the upload...

bludit Pages Editor 3.0.0 Shell Upload

Exploit Title: bludit Pages Editor 3.0.0 - Arbitrary File Upload Date: 2018-10-02 Google Dork: N/A Exploit Author: BouSalman Vendor Homepage: https://www.bludit.com/ Software Link: N/A Version: 3.0.0 Tested on: Ubuntu 18.04 CVE : 2018-1000811 POST /admin/ajax/upload-files HTTP/1.1 Host:...

bludit Pages Editor 3.0.0 - Arbitrary File Upload

bludit Pages Editor 3.0.0 - Arbitrary File Upload Exploit Title: bludit Pages Editor 3.0.0 - Arbitrary File Upload Date: 2018-10-02 Google Dork: N/A Exploit Author: BouSalman Vendor Homepage: https://www.bludit.com/ Software Link: N/A Version: 3.0.0 Tested on: Ubuntu 18.04 CVE : 2018-1000811 POST...

bludit Pages Editor 3.0.0 - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: bludit Pages Editor 3.0.0 - Arbitrary File Upload Exploit Author: BouSalman Vendor Homepage: https://www.bludit.com/ Software Link: N/A Version: 3.0.0 Tested on: Ubuntu 18.04 CVE : 2018-1000811 POST /admin/ajax/upload-files...

Design/Logic Flaw

bludit version 3.0.0 contains a Unrestricted Upload of File with Dangerous Type vulnerability in Content Upload in Pages Editor that can result in Remote Command Execution. This attack appear to be exploitable via malicious user have to upload a crafted payload containing PHP code...

CVE-2018-1000811

bludit version 3.0.0 contains a Unrestricted Upload of File with Dangerous Type vulnerability in Content Upload in Pages Editor that can result in Remote Command Execution. This attack appear to be exploitable via malicious user have to upload a crafted payload containing PHP code...

CVE-2018-1000811

bludit version 3.0.0 contains a Unrestricted Upload of File with Dangerous Type vulnerability in Content Upload in Pages Editor that can result in Remote Command Execution. This attack appear to be exploitable via malicious user have to upload a crafted payload containing PHP code...

CVE-2018-1000811

bludit version 3.0.0 contains a Unrestricted Upload of File with Dangerous Type vulnerability in Content Upload in Pages Editor that can result in Remote Command Execution. This attack appear to be exploitable via malicious user have to upload a crafted payload containing PHP code...

CVE-2018-1000811

Bludit 3.0.0 Pages Editor content upload feature is vulnerable to Unrestricted Upload of File with Dangerous Type, enabling Remote Command Execution. A crafted payload containing PHP code uploaded via the Pages Editor can compromise the server. Public disclosures and mirrors (CNVD-2019-03580, NVD...

CVE-2018-1000811: Unrestricted Upload of File with Dangerous Type

bludit version 3.0.0 contains a Unrestricted Upload of File with Dangerous Type vulnerability in Content Upload in Pages Editor that can result in Remote Command Execution. This attack appear to be exploitable via malicious user have to upload a crafted payload containing PHP code...

PT-2018-9535

Name of the Vulnerable Software and Affected Versions bludit version 3.0.0 Description The issue allows for Unrestricted Upload of File with Dangerous Type, which can lead to Remote Command Execution. This can be exploited by a malicious user uploading a crafted payload containing PHP code...

Bludit cross-site scripting vulnerability (CNVD-2018-19087)

Bludit is an open source and free lightweight blogging CMS content management system system. A cross-site scripting vulnerability exists in Bludit version 2.3.4, which can be exploited by remote attackers to execute JavaScript code with the help of a user name...

CVE-2018-16313

Bludit 2.3.4 allows XSS via a user name...

Cross site scripting

Bludit 2.3.4 allows XSS via a user name...

CVE-2018-16313

Bludit 2.3.4 allows XSS via a user name...

CVE-2018-16313

Bludit 2.3.4 allows XSS via a user name...

CVE-2018-16313

CVE-2018-16313 affects Bludit 2.3.4 and enables cross-site scripting via a user name. The connected CNVD entry notes a remote XSS vulnerability in Bludit 2.3.4 that allows execution of JavaScript in the affected user’s browser, implying exploitation would occur through crafted user-name input. No...

Bludit Cross-Site Scripting Vulnerability

Bludit is an open source free lightweight blog CMS Content Management System system. new page, new category and edit post function body message context are among the functional modules. new page is a new page to add modules. new category is a new category to add modules . new page is a new page a...

CVE-2017-16636

In Bludit v1.5.2 and v2.0.1, an XSS vulnerability is located in the new page, new category, and edit post function body message context. Remote attackers are able to bypass the basic editor validation to trigger cross site scripting. The XSS is persistent and the request method to inject via edit...

CVE-2017-16636

In Bludit v1.5.2 and v2.0.1, an XSS vulnerability is located in the new page, new category, and edit post function body message context. Remote attackers are able to bypass the basic editor validation to trigger cross site scripting. The XSS is persistent and the request method to inject via edit...