Vulnerability Database

314,373

Total vulnerabilities in the database

CVE-2017-14399

In BlackCat CMS 1.2.2, unrestricted file upload is possible in backend\media\ajax_rename.php via the extension parameter, as demonstrated by changing the extension from .jpg to .php.

  • Published: Sep 12, 2017
  • Updated: Nov 9, 2025
  • CVE: CVE-2017-14399
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/Au:S/C:P/I:P/A:P

CWEs:

Software From Fixed in
blackcat-cms / blackcat_cms 1.2.2 1.2.2.x