high8.8Public exploit code
CVE-2018-1000811
bludit version 3.0.0 contains a Unrestricted Upload of File with Dangerous Type vulnerability in Content Upload in Pages Editor that can result in Remote Comma…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- bludit Pages Editor 3.0.0 - Arbitrary File Upload2018-12-27 · webapps · php
Impact
bludit version 3.0.0 contains a Unrestricted Upload of File with Dangerous Type vulnerability in Content Upload in Pages Editor that can result in Remote Command Execution. This attack appear to be exploitable via malicious user have to upload a crafted payload containing PHP code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bludit | Bludit | Version 3.0.0 |