CVE-2019-16113
Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg file name, and then this PHP code...
- Published
- Sep 8, 2019
- Updated
- Aug 5, 2024
- Assigning CNA
- mitre
- Evidence observed
- Nov 20, 2019
Primary CVSS
nvd · CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HHigh · next 30 days
- Percentile
- 99.6%
- Model date
- Sep 21, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg file name, and then this PHP code can write other PHP code to a ../ pathname.
Sources
12Bludit >= 3.9.2 - Authenticated RCE (CVE-2019-16113)
- CVE-2019-16113Exploit
Bludit 3.9.2 - Remote command execution - CVE-2019-16113
Python proof-of-concept exploit for Bludit 3.9.2 remote code execution via directory traversal in image upload, enabling PHP payload injection to achieve arbitrary code execution.
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.