0xConstant / CVE-2019-16113 Public

Notifications You must be signed in to change notification settings
Fork 3
Star 1

Bludit 3.9.2 - Remote command execution - CVE-2019-16113

1 star 3 forks Branches Tags Activity

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 4 Commits
README.md		README.md
poc.py		poc.py

Repository files navigation

Bludit 3.9.2 - Remote command execution - CVE-2019-16113

This exploit combines two exploits in Bludit CMS 3.9.2 to gain remote code execution on the target system.

The original exploits are CVE-2019-17240 & CVE-2019-16113.

Features

Bruteforce password + RCE
Bruteforce username:password + RCE

Reproduce

Setup Bludit 3.9.2 CMS
Configure login details
run the exploit:

python3 poc.py

About

Bludit 3.9.2 - Remote command execution - CVE-2019-16113

Report repository

Releases

No releases published

Packages

No packages published

Languages

Python 100.0%