CVE-2018-1000811

PoC —

CVSS 3.0

8.8 high

EPSS

48%p99

Published

Dec 20, 2018 (Dec 20, 2018)

Modified

Jun 17, 2026

Description

bludit version 3.0.0 contains a Unrestricted Upload of File with Dangerous Type vulnerability in Content Upload in Pages Editor that can result in Remote Command Execution. This attack appear to be exploitable via malicious user have to upload a crafted payload containing PHP code.

Vendors: bludit
Products: bludit
Weakness: CWE-434
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (47.6%)

In the news0 stories

No ingested article mentions this CVE yet.