high8.8Public exploit code
CVE-2019-16113
Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg file name, and then this PHP code ca…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Bludit - Directory Traversal Image File Upload (Metasploit)2019-11-20 · remote · php · Verified
- Bludit 3.9.2 - Directory Traversal2020-07-26 · webapps · multiple
- Bludit 3.9.12 - Directory Traversal2020-06-09 · webapps · php
Impact
Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg file name, and then this PHP code can write other PHP code to a ../ pathname.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bludit | Bludit | Version 3.9.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/155295/Bludit-Directory-Traversal-Image-File-Upload.html
- http://packetstormsecurity.com/files/157988/Bludit-3.9.12-Directory-Traversal.html
- http://packetstormsecurity.com/files/158569/Bludit-3.9.2-Directory-Traversal.html
- https://github.com/bludit/bludit/issues/1081
- http://packetstormsecurity.com/files/155295/Bludit-Directory-Traversal-Image-File-Upload.html
- http://packetstormsecurity.com/files/157988/Bludit-3.9.12-Directory-Traversal.html
- http://packetstormsecurity.com/files/158569/Bludit-3.9.2-Directory-Traversal.html
- https://github.com/bludit/bludit/issues/1081