6 matches found
CVE-2017-14399
In BlackCat CMS 1.2.2, unrestricted file upload is possible in backend\media\ajaxrename.php via the extension parameter, as demonstrated by changing the extension from .jpg to .php...
SUSE CVE-2017-13670
In BlackCat CMS 1.2, remote authenticated users can upload any file via the media upload function in backend/media/ajaxupload.php, as demonstrated by a ZIP archive that contains a .php file...
Unrestricted file upload
In BlackCat CMS 1.2.2, unrestricted file upload is possible in backend\media\ajaxrename.php via the extension parameter, as demonstrated by changing the extension from .jpg to .php...
CVE-2017-14399: Unrestricted Upload of File with Dangerous Type
In BlackCat CMS 1.2.2, unrestricted file upload is possible in backend\media\ajaxrename.php via the extension parameter, as demonstrated by changing the extension from .jpg to .php...
BlackCat CMS Arbitrary File Upload Vulnerability
BlackCat CMS is a PHP5, HTML5 content management system. An arbitrary file upload vulnerability exists in BlackCat CMS version 1.2, which allows remote attackers to upload arbitrary files via the media upload function in backend/media/ajaxupload.php...
CVE-2017-13670: Undefined Security Weakness
In BlackCat CMS 1.2, remote authenticated users can upload any file via the media upload function in backend/media/ajaxupload.php, as demonstrated by a ZIP archive that contains a .php file...