CVE-2017-14050: Malicious File Upload
Published Aug 31, 2017
·Updated
In BlackCat CMS 1.2, backend/addons/install.php allows remote authenticated users to execute arbitrary PHP code via a ZIP archive that contains a .php file.
Affected Software
1 affected component
Blackcat-cms Blackcat Cms=1.2
Event History
Aug 31, 2017
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-14050?
CVE-2017-14050 has been classified as a high severity vulnerability due to its ability to allow arbitrary code execution.
2
How do I fix CVE-2017-14050?
To fix CVE-2017-14050, update BlackCat CMS to the latest version that has addressed this vulnerability.
3
Who is affected by CVE-2017-14050?
Any user of BlackCat CMS version 1.2 is affected by CVE-2017-14050 if they have remote authenticated access.
4
What exploitation methods can be used for CVE-2017-14050?
CVE-2017-14050 can be exploited by uploading a specially crafted ZIP archive that contains a malicious .php file.
5
Is CVE-2017-14050 a remote code execution vulnerability?
Yes, CVE-2017-14050 is a remote code execution vulnerability that allows authenticated users to execute arbitrary PHP code.