CVE-2019-16113

Description

Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg file name, and then this PHP code can write other PHP code to a ../ pathname.

References

https://github.com/d3vn0mi/cve-2016-16113

https://github.com/persian64/CVE-2019-16113

https://github.com/nthR00t/CVE-2019-16113

https://github.com/k4yhan/CVE-2019-16113

https://github.com/hamedkohi/CVE-2019-16113

https://github.com/0xkasra/CVE-2019-16113

https://github.com/0xk4sra/CVE-2019-16113

https://github.com/cybervaca/CVE-2019-16113

https://github.com/bludit/bludit/issues/1081

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-6954

http://packetstormsecurity.com/files/158569/Bludit-3.9.2-Directory-Traversal.html

http://packetstormsecurity.com/files/157988/Bludit-3.9.12-Directory-Traversal.html

http://packetstormsecurity.com/files/155295/Bludit-Directory-Traversal-Image-File-Upload.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS