CVE-2018-1000811

high · 8.8

bludit version 3.0.0 contains a Unrestricted Upload of File with Dangerous Type vulnerability in Content Upload in Pages Editor that can result in Remote Command Execution. This attack appear to be exploitable via malicious user have to upload a crafted payload containing PHP code.

8.8

CVSS

47.6%

EPSS (exploit prob.)

99th

EPSS percentile

2018-12-20

Published

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-434

Affected products

Vendor	Product	Affected versions
bludit	bludit	3.0.0

Check a specific version with /api/v1/cve/match.

References

https://github.com/bludit/bludit/issues/812
https://www.exploit-db.com/exploits/46060/
https://github.com/bludit/bludit/issues/812
https://www.exploit-db.com/exploits/46060/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2018-1000811