CVE-2020-23765

A file upload vulnerability was discovered in the file path /bl-plugins/backup/plugin.php on Bludit version 3.12.0. If an attacker is able to gain Administrator rights they will be able to use unsafe plugins to upload a backup file and control the server.

• CWE-434

• https://github.com/bludit/bludit/issues/1218Exploit, Issue Tracking, Third Party Advisory
• https://github.com/bludit/bludit/issues/1218Exploit, Issue Tracking, Third Party Advisory

Published

May 21, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-23740In DriverGenius 9.61.5480.28 there is a local privilege esca…7.8
• CVE-2020-23741In AnyView (network police) network monitoring software 4.6.…5.5
• CVE-2020-23754Cross Site Scripting (XSS) vulnerability in infusions/member…9.6
• CVE-2020-23761Cross Site Scripting (XSS) vulnerability in subrion CMS Vers…6.1
• CVE-2020-23762Cross Site Scripting (XSS) vulnerability in the Larsens Cale…5.4
• CVE-2020-23763SQL injection in admin.php in Online Book Store 1.0 allows r…9.8
• CVE-2020-23766An arbitrary file deletion vulnerability was discovered on h…6.5
• CVE-2020-23768An information disclosure vulnerability was discovered in al…7.5
• CVE-2020-23774A reflected XSS vulnerability exists in tohtml/convert.php o…6.1
• CVE-2020-23776A SSRF vulnerability exists in Winmail 6.5 in app.php in the…7.5
• CVE-2020-23790An Arbitrary File Upload vulnerability was discovered in the…9.8
• CVE-2020-23793An issue was discovered in spice-server spice-server-0.14.0-…8.6