CVE-2023-53892
Blackcat CMS 1.4 Remote Code Execution via Jquery Plugin Manager
Summary
Blackcat CMS 1.4 Remote Code Execution via Jquery Plugin Manager
Original description
The description as published by the source.
Blackcat CMS 1.4 contains a remote code execution vulnerability that allows authenticated administrators to upload malicious PHP files through the jquery plugin manager. Attackers can upload a zip file with a PHP shell script and execute arbitrary system commands by accessing the uploaded plugin's PHP file with a 'code' parameter.
References
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- report exploit-db.com
- web blackcat-cms.org