0xDTC/Bludit-3.9.2-Auth-Bruteforce-Bypass-CVE-2019-17240

PoC

Bludit 3.9.2 - Auth Bruteforce Bypass CVE:2019-17240 Refurbish In bash

view exploit source poc_in_githubauthor 0xDTCpublished 2025-01-11catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2019-17240US	critical9.8	39.6% (99th)	Exploit	2019-10-06
bl-kernel/security.class.php in Bludit 3.9.2 allows attackers to bypass a brute-force protection mechanism by using many different forged X-Forwarded-For or Client-IP HTTP headers.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.