CVE-2017-14399
EUVD-2017-590212.09.2017, 21:29
In BlackCat CMS 1.2.2, unrestricted file upload is possible in backend\media\ajax_rename.php via the extension parameter, as demonstrated by changing the extension from .jpg to .php.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| blackcat-cms | blackcat_cms | 1.2.2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration