Vulnerabilities > CVE-2017-13670 - Unspecified vulnerability in Blackcat-Cms Blackcat CMS 1.2
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
NONE Integrity impact
HIGH Availability impact
NONE Summary
In BlackCat CMS 1.2, remote authenticated users can upload any file via the media upload function in backend/media/ajax_upload.php, as demonstrated by a ZIP archive that contains a .php file.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |