Exploitation Summary
EIP tracks 1 public exploit for CVE-2020-29282. PoCs published by BKpatron.
AI-analyzed exploit summary This exploit demonstrates an authentication bypass vulnerability in BloodX CMS 1.0 via SQL injection in the login.php file. The payload '%'=''or' bypasses authentication by manipulating the SQL query.
Description
SQL injection vulnerability in BloodX 1.0 allows attackers to bypass authentication.
Exploits (1)
exploitdb
WORKING POC
by BKpatron · textwebappsphp
https://www.exploit-db.com/exploits/48786
This exploit demonstrates an authentication bypass vulnerability in BloodX CMS 1.0 via SQL injection in the login.php file. The payload '%'=''or' bypasses authentication by manipulating the SQL query.
Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:
BloodX CMS v1.0
No auth needed
Prerequisites:
Access to the login page of BloodX CMS
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (3)
Core 3
Core References
Exploit, Third Party Advisory x_refsource_misc
https://github.com/BigTiger2020/BloodX-CMS/blob/main/README.md
Exploit, Third Party Advisory, VDB Entry x_refsource_misc
https://www.exploit-db.com/exploits/48786
Product, Third Party Advisory x_refsource_misc
https://github.com/diveshlunker/BloodX
Scores
CVSS v3
9.8
EPSS
0.0267
EPSS Percentile
83.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-89
Status
published
Products (1)
bloodx_project/bloodx
1.0
Published
Dec 02, 2020
Tracked Since
Feb 18, 2026