CVE-2019-12548

Published June 3rd, 2019

View on NVD ↗

CVSS v3

N/A

CVSS v2

6.5

MEDIUM

Affected

PROJECT

Description

Bludit before 3.9.0 allows remote code execution for an authenticated user by uploading a php file while changing the logo through /admin/ajax/upload-logo.

bludit/bludit

Simple, Fast, Secure, Flat-File CMS

GitHub

1.43K