İçeriğe atla
Noroxi

Bludit kayıtları

bludit üreticisine ait 42 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %2,4
Pre-auth RCE
1
Düzeltme kaydı olan
%4,8
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

42 kayıt
  • CVE-2019-16113
    58Planlayın

    Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg file name, and th

    YüksekCVSS 8,8SilahlaştırılmışEPSS %78

    bludit · bludit8 Eyl 2019

  • CVE-2019-17240
    51Planlayın

    bl-kernel/security.class.php in Bludit 3.9.2 allows attackers to bypass a brute-force protection mechanism by using many different forged X-

    KritikCVSS 9,8Kavram kanıtıEPSS %40

    bludit · bludit6 Eki 2019

  • CVE-2018-1000811
    49Planlayın

    bludit version 3.0.0 contains a Unrestricted Upload of File with Dangerous Type vulnerability in Content Upload in Pages Editor that can res

    YüksekCVSS 8,8Kavram kanıtıEPSS %48

    bludit · bludit20 Ara 2018

  • CVE-2020-18879
    40Planlayın

    Unrestricted File Upload in Bludit v3.8.1 allows remote attackers to execute arbitrary code by uploading malicious files via the component '

    KritikCVSS 9,8İstismar yokEPSS %3

    bludit · bludit20 Ağu 2021

  • CVE-2020-18190
    37İzleyin

    Bludit v3.8.1 is affected by directory traversal.

    KritikCVSS 9,1İstismar yokEPSS %2

    bludit · bludit2 Eki 2020

  • CVE-2019-12548
    36İzleyin

    Bludit before 3.9.0 allows remote code execution for an authenticated user by uploading a php file while changing the logo through /admin/aj

    YüksekCVSS 8,8İstismar yokEPSS %3

    bludit · bludit3 Haz 2019

  • CVE-2020-20495
    36İzleyin

    bludit v3.13.0 contains an arbitrary file deletion vulnerability in the backup plugin via the `deleteBackup' parameter.

    KritikCVSS 9,1İstismar yokEPSS %2

    bludit · bludit31 Ağu 2021

  • CVE-2026-25099
    35İzleyin

    Remote Code Execution via Unrestricted File Upload in Bludit

    YüksekCVSS 8,7Kavram kanıtıEPSS %2

    bludit · bludit27 Mar 2026

  • CVE-2019-12742
    35İzleyin

    Bludit prior to 3.9.1 allows a non-privileged user to change the password of any account, including admin.

    YüksekCVSS 8,8İstismar yokEPSS %1

    bludit · bludit5 Haz 2019

  • CVE-2020-20210
    35İzleyin

    Bludit 3.9.2 is vulnerable to Remote Code Execution (RCE) via /admin/ajax/upload-images.

    YüksekCVSS 8,8İstismar yokEPSS %1

    bludit · bludit26 Haz 2023

  • CVE-2023-31572
    35İzleyin

    An issue in Bludit 4.0.0-rc-2 allows authenticated attackers to change the Administrator password and escalate privileges via a crafted requ

    YüksekCVSS 8,8İstismar yokEPSS %1

    bludit · bludit16 May 2023

  • CVE-2024-24551
    35İzleyin

    Bludit - Remote Code Execution (RCE) through Image API

    YüksekCVSS 8,9İstismar yokEPSS %1

    bludit · bludit24 Haz 2024

  • CVE-2024-24550
    35İzleyin

    Bludit - Remote Code Execution (RCE) through File API

    YüksekCVSS 8,9İstismar yokEPSS %1

    bludit · bludit24 Haz 2024

  • CVE-2021-25808
    31İzleyin

    A code injection vulnerability in backup/plugin.php of Bludit 3.13.1 allows attackers to execute arbitrary code via a crafted ZIP file.

    YüksekCVSS 7,8İstismar yokEPSS %1

    bludit · bludit23 Tem 2021

  • CVE-2023-24674
    31İzleyin

    Permissions vulnerability found in Bludit CMS v.4.0.0 allows local attackers to escalate privileges via the role:admin parameter.

    YüksekCVSS 7,8İstismar yokEPSS %0

    bludit · bludit1 Eyl 2023

  • CVE-2020-19228
    28İzleyin

    An issue was found in bludit v3.13.0, unsafe implementation of the backup plugin allows attackers to upload arbitrary files.

    YüksekCVSS 7,2İstismar yokEPSS %1

    bludit · bludit11 May 2022

  • CVE-2020-23765
    28İzleyin

    A file upload vulnerability was discovered in the file path /bl-plugins/backup/plugin.php on Bludit version 3.12.0.

    YüksekCVSS 7,2İstismar yokEPSS %1

    bludit · bludit21 May 2021

  • CVE-2023-53907
    28İzleyin

    Bludit 3.13.1 Authenticated Arbitrary File Download via Backup Plugin

    YüksekCVSS 7,1İstismar yokEPSS %1

    bludit · bludit17 Ara 2025

  • CVE-2021-35323
    26İzleyin

    Cross Site Scripting (XSS) vulnerability exists in bludit 3-13-1 via the username in admin/login.

    OrtaCVSS 6,1Kavram kanıtıEPSS %6

    bludit · bludit19 Eki 2021

  • CVE-2018-16313
    24İzleyin

    Bludit 2.3.4 allows XSS via a user name.

    OrtaCVSS 6,1İstismar yokEPSS %1

    bludit · bludit1 Eyl 2018

  • CVE-2024-24554
    24İzleyin

    Bludit - Insecure Token Generation

    OrtaCVSS 6,0İstismar yokEPSS %0

    bludit · bludit24 Haz 2024

  • CVE-2024-24553
    23İzleyin

    Bludit uses SHA1 as Password Hashing Algorithm

    OrtaCVSS 5,9İstismar yokEPSS %0

    bludit · bludit24 Haz 2024

  • CVE-2023-31698
    22İzleyin

    Bludit v3.14.1 is vulnerable to Stored Cross Site Scripting (XSS) via SVG file on site logo.

    OrtaCVSS 5,4Kavram kanıtıEPSS %3

    bludit · bludit17 May 2023

  • CVE-2024-24552
    22İzleyin

    Bludit is Vulnerable to Session Fixation

    OrtaCVSS 5,7İstismar yokEPSS %0

    bludit · bludit24 Haz 2024

  • CVE-2021-45744
    21İzleyin

    A Stored Cross Site Scripting (XSS) vulnerability exists in bludit 3.13.1 via the TAGS section in login panel.

    OrtaCVSS 5,4Kavram kanıtıEPSS %1

    bludit · bludit6 Oca 2022