Record summary

CVE-2015-5079 has a selected CVSS score of 7.5 (high); EIP currently links 1 catalogued exploit.

Description

Directory traversal vulnerability in widgets/logs.php in BlackCat CMS before 1.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the dl parameter.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBBlackCat CMS 1.1.1 - Arbitrary File DownloadExploitDB exploitby d4rkr0idNot analyzed1 file
ExploitDB

PoC details

References

4