CVE-2019-16113 PoC — Bludit 路径遍历漏洞

Source

https://github.com/dldygnl/CVE-2019-16113

Associated Vulnerability

Title:Bludit 路径遍历漏洞 (CVE-2019-16113)
Description:Bludit是一套开源的轻量级博客内容管理系统（CMS）。 Bludit 3.9.2版本中存在路径遍历漏洞。远程攻击者可借助bl-kernel/ajax/upload-images.php文件利用该漏洞执行代码。

Description

Bludit Exploitation Via upload Image.php

File Snapshot


 [4.0K]  /data/pocs/22f9b7d88c2a0289739233b8c2f773c743bfd646
├── [1.4K]  bludit_password.py
├── [ 950]  bludit.sh
└── [4.0K]  Hack The Box Blunder Exploit
    ├── [ 170]  commands.rc
    ├── [ 281]  foothold.sh
    ├── [ 470]  Guide to Use
    ├── [ 500]  README.md
    └── [ 143]  root.sh

1 directory, 7 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!