Lucene search
GoogleOSV:CVE-2017-13670HistoryAug 31, 2017 - 4:29 a.m.
CVE-2017-13670
2017-08-3104:29:00
Google
osv.dev
2
In BlackCat CMS 1.2, remote authenticated users can upload any file via the media upload function in backend/media/ajax_upload.php, as demonstrated by a ZIP archive that contains a .php file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| blackcatcms | eq | 1.0.2 | |
| blackcatcms | eq | 1.0.1 | |
| blackcatcms | eq | 1.0 | |
| blackcatcms | eq | 1.0.3 | |
| blackcatcms | eq | 1.0.2a | |
| blackcatcms | eq | 1.2 | |
| blackcatcms | eq | 1.1 |
Related
cvelist
cvelist
CVE-2017-13670
2017-08-31 04:00:00
nvd
nvd
CVE-2017-13670
2017-08-31 04:29:00
prion
prion
Design/Logic Flaw
2017-08-31 04:29:00
cve
cve
CVE-2017-13670
2017-08-31 04:29:00