Security Advisory

CVE-2017-14399

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-09-12 21:00:00

Last updated 2024-09-17 04:00:27

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

In BlackCat CMS 1.2.2, unrestricted file upload is possible in backend\media\ajax_rename.php via the extension parameter, as demonstrated by changing the extension from .jpg to .php.

← Browse all CVEs View on cve.org ↗