Browse CVEs

HIGH 8.8 CVE-2017-9365 CSRF exists in BigTree CMS through 4.2.18 with the force parameter to /admin/pages/revisions.php - for example: /admin/pages/revisions/1/?force=false… Bigtree Cms after 4.2.18 Fix from $1,9502017-06-02 HIGH 8.8 CVE-2017-7881 BigTree CMS through 4.2.17 relies on a substring check for CSRF protection, which allows remote attackers to bypass this check by placing the require… Bigtree Cms after 4.2.17 Fix from $1,9502017-04-15 CRITICAL 9.8 CVE-2017-7695 Unrestricted File Upload exists in BigTree CMS before 4.2.17: if an attacker uploads an 'xxx.php[space]' file, they could bypass a safety check and e… Bigtree Cms after 4.2.16 Fix from $2,3002017-04-11 HIGH 7.1 CVE-2017-6914 CSRF exists in BigTree CMS 4.1.18 and 4.2.16 with the id parameter to the admin/ajax/users/delete/ page. A user can be deleted. Bigtree Cms Patch available Fix from $1,9502017-03-15 MEDIUM 5.4 CVE-2016-10223 An issue was discovered in BigTree CMS before 4.2.15. The vulnerability exists due to insufficient filtration of user-supplied data in the "id" HTTP … Bigtree Cms after 4.2.14 Fix from $1,6002017-02-14 MEDIUM 6.8 CVE-2013-5313 Cross-site request forgery (CSRF) vulnerability in core/admin/modules/users/update.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to … Bigtree Cms after 4.0 Fix from $1,6002013-08-19 MEDIUM 6.8 CVE-2013-4881 Cross-site request forgery (CSRF) vulnerability in core/admin/modules/users/create.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to … Bigtree Cms after 4.0 Fix from $1,6002013-08-19 HIGH 7.5 CVE-2013-4879 SQL injection vulnerability in core/inc/bigtree/cms.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to execute arbitrary SQL commands … Bigtree Cms after 4.0 Fix from $1,9502013-08-14