CVE-2018-1000811 EXPLOIT
8.8
HIGH · CVSS 3.0 · EPSS 47.6% (pctl 99)
Patch early
A public exploit exists.
Description
bludit version 3.0.0 contains a Unrestricted Upload of File with Dangerous Type vulnerability in Content Upload in Pages Editor that can result in Remote Command Execution. This attack appear to be exploitable via malicious user have to upload a crafted payload containing PHP code.
Scoring
| CVSS | 8.8 (HIGH, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 47.65% — more likely to be exploited than 99% of all CVEs |
| Weakness | CWE-434 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2018-12-20 |
| Last modified | 2026-06-17 |
Affected (1)
| Vendor | Product |
|---|---|
| bludit | bludit |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | bludit Pages Editor 3.0.0 - Arbitrary File Upload | 2018-12-27 |
References
→ the Explorer · watch your stack · NVD