Lucene search
GoogleOSV:CVE-2017-9379HistoryJun 02, 2017 - 3:29 p.m.
CVE-2017-9379
2017-06-0215:29:00
Google
osv.dev
3
Multiple CSRF issues exist in BigTree CMS through 4.2.18 - the clear parameter to core\admin\modules\dashboard\vitals-statistics\404\clear.php and the from or to parameter to core\admin\modules\dashboard\vitals-statistics\404\create-301.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| bigtree-cms | eq | 4.0beta6 | |
| bigtree-cms | eq | 4.2.12 | |
| bigtree-cms | eq | 4.2 | |
| bigtree-cms | eq | 4.0beta2 | |
| bigtree-cms | eq | 4.2.7 | |
| bigtree-cms | eq | 4.1.6 | |
| bigtree-cms | eq | 4.2.3 | |
| bigtree-cms | eq | 4.2.14 | |
| bigtree-cms | eq | 4.2.9 | |
| bigtree-cms | eq | 4.0.1 |
Related
cvelist
cvelist
CVE-2017-9379
2022-10-03 16:23:09
prion
prion
Cross site request forgery (csrf)
2017-06-02 15:29:00
nvd
nvd
CVE-2017-9379
2017-06-02 15:29:00
cve
cve
CVE-2017-9379
2022-10-03 16:23:09
openvas
openvas
BigTree CMS <= 4.2.18 Multiple CSRF and XSS Vulnerabilities
2017-06-13 00:00:00