Bludit Version 3.0.0 Unrestricted File Upload Vulnerability with Remote Command Execution

CVE-2018-1000811 · MEDIUM Severity

AV:N/AC:L/AU:S/C:P/I:P/A:P

bludit version 3.0.0 contains a Unrestricted Upload of File with Dangerous Type vulnerability in Content Upload in Pages Editor that can result in Remote Command Execution. This attack appear to be exploitable via malicious user have to upload a crafted payload containing PHP code.

Learn more about our User Device Pen Test.