Record summary

CVE-2018-1000811 has a selected CVSS score of 8.8 (high); EIP currently links 1 catalogued exploit.

Description

bludit version 3.0.0 contains a Unrestricted Upload of File with Dangerous Type vulnerability in Content Upload in Pages Editor that can result in Remote Command Execution. This attack appear to be exploitable via malicious user have to upload a crafted payload containing PHP code.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBbludit Pages Editor 3.0.0 - Arbitrary File UploadExploitDB exploitby BouSalmanNot analyzed1 file
ExploitDB

PoC details

References

3