Blackcat Cms Security Vulnerabilities and Issues — Blackcat Cms CVE List

Lucene search

Blackcat-cmsBlackcat Cms

4 matches found

CVE•added 2020/09/15 10:15 p.m.•76 views

CVE-2020-25453

An issue was discovered in BlackCat CMS before 1.4. There is a CSRF vulnerability (bypass csrf_token) that allows remote arbitrary code execution.

8.8CVSS8.9AI score0.00425EPSS

CVE•added 2017/08/31 4:29 a.m.•55 views

CVE-2017-14048

BlackCat CMS 1.2 allows remote authenticated users to inject arbitrary PHP code into info.php via a crafted new_modulename parameter to backend/addons/ajax_create.php. NOTE: this can be exploited via CSRF.

8.8CVSS8.3AI score0.00181EPSS

CVE•added 2017/08/31 4:29 a.m.•38 views

CVE-2017-14050

In BlackCat CMS 1.2, backend/addons/install.php allows remote authenticated users to execute arbitrary PHP code via a ZIP archive that contains a .php file.

8.8CVSS8.6AI score0.00508EPSS

CVE•added 2017/09/12 9:29 p.m.•32 views

CVE-2017-14399

In BlackCat CMS 1.2.2, unrestricted file upload is possible in backend\media\ajax_rename.php via the extension parameter, as demonstrated by changing the extension from .jpg to .php.

8.8CVSS8.6AI score0.00381EPSS