CVE-2019-12548

Bludit before 3.9.0 allows remote code execution for an authenticated user by uploading a php file while changing the logo through /admin/ajax/upload-logo

published June 3, 2019

CVSS
—
EPSS
3%
Percentile
87.2
In the wild
Unconfirmed
What it is

Bludit before 3.9.0 allows remote code execution for an authenticated user by uploading a php file while changing the logo through /admin/ajax/upload-logo.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02988 · 87.2th percentile
Published
2019-06-03T20:38Z
EPSS history
Timeline
  • 03 JUN 20:38Z
    Bludit before 3.9.0 allows remote code execution for an authenticated user by uploading a php file while changing the logo through /admin/ajax/upload-logo
    cvelistv5