Lucene search
GoogleOSV:CVE-2017-6916HistoryMar 15, 2017 - 4:59 p.m.
CVE-2017-6916
2017-03-1516:59:00
Google
osv.dev
2
CSRF exists in BigTree CMS 4.1.18 with the nav-social[#] parameter to the admin/settings/update/ page. The Navigation Social can be changed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| bigtree-cms | eq | 4.0beta6 | |
| bigtree-cms | eq | 4.1.8 | |
| bigtree-cms | eq | 4.0beta2 | |
| bigtree-cms | eq | 4.1.6 | |
| bigtree-cms | eq | 4.0.1 | |
| bigtree-cms | eq | RC2 | |
| bigtree-cms | eq | 4.0rc1 | |
| bigtree-cms | eq | 4.0.2 | |
| bigtree-cms | eq | 4.0b7 | |
| bigtree-cms | eq | 4.1.3 |
Related
cve
cve
CVE-2017-6916
2022-10-03 16:22:57
cvelist
cvelist
CVE-2017-6916
2022-10-03 16:22:57
prion
prion
Cross site request forgery (csrf)
2017-03-15 16:59:00
nvd
nvd
CVE-2017-6916
2017-03-15 16:59:00
openvas
openvas
BigTree CMS Multiple CSRF Vulnerabilities
2017-03-17 00:00:00
nessus
nessus
BigTree-CMS 4.2.x < 4.2.17 Multiple Vulnerabilities
2017-06-21 00:00:00