CVE-2019-16113

CVE-2019-16113 Dies ist eine Python-Implementierung eines Proof-of-Concept PoC für die Bludit Directory Traversal Image File Upload Schwachstelle CVE-2019-16113 Bludit 3.9.2 ermöglicht Remote-Code-Ausführung über bl-kernel/ajax/upload-images.php, da PHP-Code mit einem .jpg- oder .png- Dateinamen...

Bludit 3.9.2 remote code execution

Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg file name, and then this PHP code can write other PHP code to a ../ pathname. Recent assessments: wchen-r7 at October 24, 2019 4:38am UTC reported: CVE-2019-16113 Bludit...

CVE-2013-5962

The CVE-2013-5962 entry relates to the WordPress plugin Complete Gallery Manager (before 3.3.4 rev40279). Affected component: frames/upload-images.php which permits an unrestricted file upload. Root cause: uploading a file with an executable extension allows remote attackers to access the uploade...