CVE-2018-1000811

bludit version 3.0.0 contains a Unrestricted Upload of File with Dangerous Type vulnerability in Content Upload in Pages Editor that can result in Remote Command Execution. This attack appear to be exploitable via malicious user have to upload a crafted payload containing PHP code.

CVSS v3.0

8.8 HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

47.64% chance of exploitation in the next 30 days, 99th percentile

Published

2018-12-20

Updated

2024-08-05

Proof-of-concept exploits (1)

• bludit/bludit/issues/812

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/46060

References

• CVE Record
• NVD entry

Related

• CVE-2019-16113
• CVE-2019-17240
• CVE-2020-8812
• CVE-2021-35323
• CVE-2018-1000810
• CVE-2018-1000812