high8.8
CVE-2017-14050
In BlackCat CMS 1.2, backend/addons/install.php allows remote authenticated users to execute arbitrary PHP code via a ZIP archive that contains a .php file.
Impact
In BlackCat CMS 1.2, backend/addons/install.php allows remote authenticated users to execute arbitrary PHP code via a ZIP archive that contains a .php file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Blackcat-Cms | Blackcat Cms | Version 1.2 |