zerozer/bludit-vulnerable repository overview

⁠Bludit 3.13.1 - Vulnerable Image

WARNING: This is a deliberately vulnerable web application for educational purposes only. Do not deploy in a production environment.

⁠Vulnerability

This image contains CVE-2021-35323, a Cross-Site Scripting (XSS) vulnerability in the username field of the admin login page.

Exploit-DB: https://www.exploit-db.com/exploits/50529⁠

⁠Usage

docker run -d -p 8080:80 bludit-vulnerable:3.13.1

Then visit http://localhost:8080⁠ to complete setup.

⁠Exploit

On the login page at /admin/login enter the following as the username (base64 encoded)**: YWRtaW4iPjxpbWcgc3JjPXggb25lcnJvcj1hbGVydCgxKT4=

**Dockerhub thinks the input is a real XSS attempt, so I encoded it with base64 to stop that. Decode with any method you want. I used https://www.base64encode.org/⁠ to encode it.