Exploitation Summary
EIP tracks 1 public exploit for CVE-2020-10129. PoCs published by InfoSec4Fun.
AI-analyzed exploit summary This repository contains a writeup describing CVE-2020-10129, a privilege escalation vulnerability in SearchBlox before version 9.2. The vulnerability allows lower-privileged users to access admin functionality via a specific URL.
Description
SearchBlox before Version 9.2.1 is vulnerable to Privileged Escalation-Lower user is able to access Admin functionality.
Exploits (1)
nomisec
WRITEUP
by InfoSec4Fun · poc
https://github.com/InfoSec4Fun/CVE-2020-10129
This repository contains a writeup describing CVE-2020-10129, a privilege escalation vulnerability in SearchBlox before version 9.2. The vulnerability allows lower-privileged users to access admin functionality via a specific URL.
Classification
Writeup 90%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target:
SearchBlox before 9.2
Auth required
Prerequisites:
Access to a lower-privileged user account · Network access to the SearchBlox web interface
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (1)
Core 1
Core References
Scores
CVSS v3
8.8
EPSS
0.0069
EPSS Percentile
48.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-269
Status
published
Products (1)
searchblox/searchblox
< 9.2.1
Published
Sep 06, 2023
Tracked Since
Feb 18, 2026