LucaReggiannini/Bludit-3-9-2-bb

PoC

Bludit 3.9.2 - bruteforce bypass - CVE-2019-17240

view exploit source poc_in_githubauthor LucaReggianninipublished 2020-06-24catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2019-17240US	critical9.8	39.6% (99th)	Exploit	2019-10-06
bl-kernel/security.class.php in Bludit 3.9.2 allows attackers to bypass a brute-force protection mechanism by using many different forged X-Forwarded-For or Client-IP HTTP headers.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.