EDB-46664

PoC

Bolt CMS 3.6.6 - Cross-Site Request Forgery / Remote Code Execution

view exploit source exploit_dbtype webappsauthor FelipeGasparpublished 2019-04-08catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2019-10874US	high8.8	4.52% (92nd)	Exploit	2019-04-05
Cross Site Request Forgery (CSRF) in the bolt/upload File Upload feature in Bolt CMS 3.6.6 allows remote attackers to execute arbitrary code by uploading a JavaScript file to inclu…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.