Логотип exploitDog
bind:CVE-2017-14399
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2017-14399

Количество 2

Количество 2

nvd логотип

CVE-2017-14399

больше 8 лет назад

In BlackCat CMS 1.2.2, unrestricted file upload is possible in backend\media\ajax_rename.php via the extension parameter, as demonstrated by changing the extension from .jpg to .php.

CVSS3: 8.8
EPSS: Низкий
github логотип

GHSA-45w6-rx3m-pxwg

больше 3 лет назад

In BlackCat CMS 1.2.2, unrestricted file upload is possible in backend\media\ajax_rename.php via the extension parameter, as demonstrated by changing the extension from .jpg to .php.

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2017-14399

In BlackCat CMS 1.2.2, unrestricted file upload is possible in backend\media\ajax_rename.php via the extension parameter, as demonstrated by changing the extension from .jpg to .php.

CVSS3: 8.8
0%
Низкий
больше 8 лет назад
github логотип
GHSA-45w6-rx3m-pxwg

In BlackCat CMS 1.2.2, unrestricted file upload is possible in backend\media\ajax_rename.php via the extension parameter, as demonstrated by changing the extension from .jpg to .php.

CVSS3: 8.8
0%
Низкий
больше 3 лет назад

Уязвимостей на страницу