Lucene search
K

CVE-2013-4879

🗓️ 13 Aug 2013 18:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 113 Views🌐 WEB

SQL injection vulnerability in BigTree CMS 4.0

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
0day.today
BigTree CMS 4.0 RC2 - Multiple Vulnerabilities
8 Aug 201300:00
zdt
Tenable Nessus
BigTree CMS index.php SQL Injection
15 Aug 201300:00
nessus
Circl
CVE-2013-4879
8 Aug 201300:00
circl
Cvelist
CVE-2013-4879
13 Aug 201318:00
cvelist
Dsquare
BigTree CMS 4.0 RC2 SQL Injection
7 Oct 201300:00
dsquare
Exploit DB
BigTree CMS 4.0 RC2 - Multiple Vulnerabilities
8 Aug 201300:00
exploitdb
EUVD
EUVD-2013-4724
7 Oct 202500:30
euvd
exploitpack
BigTree CMS 4.0 RC2 - Multiple Vulnerabilities
8 Aug 201300:00
exploitpack
htbridge
Multiple Vulnerabilities in BigTree CMS
17 Jul 201300:00
htbridge
NVD
CVE-2013-4879
14 Aug 201313:49
nvd
Rows per page
NVD
ParameterPositionPathDescriptionCWE
modulequery param/site/index.php/admin/developer/modules/views/add/?module=%22%3E%3Cscript%3Ealert%28document.cookie%29;%3C/script%3E&table=1&title=dolfbnwlXSS via unsanitized module GET parameter leading to script execution in admin context.CWE-79
tablequery param/site/index.php/admin/developer/modules/views/add/?module=%22%3E%3Cscript%3Ealert%28document.cookie%29;%3C/script%3E&table=1&title=dolfbnwlXSS via unsanitized module GET parameter leading to script execution in admin context.CWE-79
titlequery param/site/index.php/admin/developer/modules/views/add/?module=%22%3E%3Cscript%3Ealert%28document.cookie%29;%3C/script%3E&table=1&title=dolfbnwlXSS via unsanitized module GET parameter leading to script execution in admin context.CWE-79
emailrequest body/site/index.php/admin/users/create/CSRF via form submission to admin/users/create/ to create a new admin user.CWE-352
passwordrequest body/site/index.php/admin/users/create/CSRF via form submission to admin/users/create/ to create a new admin user.CWE-352
levelrequest body/site/index.php/admin/users/create/CSRF via form submission to admin/users/create/ to create a new admin user.CWE-352
namerequest body/site/index.php/admin/users/create/CSRF via form submission to admin/users/create/ to create a new admin user.CWE-352
companyrequest body/site/index.php/admin/users/create/CSRF via form submission to admin/users/create/ to create a new admin user.CWE-352

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 23:58Current
8.3High risk
Vulners AI Score8.3
CVSS 27.5
EPSS0.03169
113