high8.8Public exploit code
CVE-2020-25453
An issue was discovered in BlackCat CMS before 1.4.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BlackCat CMS 1.3.6 - Cross-Site Request Forgery2020-09-21 · webapps · php
Impact
An issue was discovered in BlackCat CMS before 1.4. There is a CSRF vulnerability (bypass csrf_token) that allows remote arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Blackcat-Cms | Blackcat Cms | before 1.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/159237/BlackCat-CMS-1.3.6-Cross-Site-Request-Forgery.html
- https://github.com/BlackCatDevelopment/BlackCatCMS/issues/389
- http://packetstormsecurity.com/files/159237/BlackCat-CMS-1.3.6-Cross-Site-Request-Forgery.html
- https://github.com/BlackCatDevelopment/BlackCatCMS/issues/389