Blackcat CMS Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Blackcat CMS version 1.4. This issue allows authenticated administrators to upload malicious PHP files via the jQuery plugin manager. Exploitation involves uploading a zip file containing a PHP shell script, which can then be executed by accessing the uploaded plugin's PHP file with a 'code' parameter.

Impact

Exploitation of this vulnerability allows for remote code execution on the server where Blackcat CMS is hosted.

Reproduction

To reproduce this vulnerability, log into an admin account and navigate to the jQuery plugin manager within the admin tools. Upload a zip file containing a PHP script designed to execute system commands. After the file is uploaded, access the PHP script through the web server, using a 'code' parameter to execute the embedded commands.