CVE-2023-53892
Blackcat CMS 1.4 Remote Code Execution via Jquery Plugin Manager
Résumé
Blackcat CMS 1.4 Remote Code Execution via Jquery Plugin Manager
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Blackcat CMS 1.4 contains a remote code execution vulnerability that allows authenticated administrators to upload malicious PHP files through the jquery plugin manager. Attackers can upload a zip file with a PHP shell script and execute arbitrary system commands by accessing the uploaded plugin's PHP file with a 'code' parameter.
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- report exploit-db.com
- web blackcat-cms.org