CVE

CVE-2017-14399

CVE-2017-14399

In BlackCat CMS 1.2.2, unrestricted file upload is possible in backendmediaajax_rename.php via the extension parameter, as demonstrated by changing the extension from .jpg to .php.

Source: CVE-2017-14399

Exit mobile version