2 matches found
Cross site request forgery (csrf)
CSRF exists in BigTree CMS through 4.2.18 with the force parameter to /admin/pages/revisions.php - for example: /admin/pages/revisions/1/?force=false. A page with id=1 can be unlocked...
6.8CVSS7.1AI score0.00467EPSS
SaveExploits1References2Affected Software1
CVE-2017-9365: Cross-Site Request Forgery (CSRF)
CSRF exists in BigTree CMS through 4.2.18 with the force parameter to /admin/pages/revisions.php - for example: /admin/pages/revisions/1/?force=false. A page with id=1 can be unlocked...
8.8CVSS7.8AI score0.00467EPSS
SaveExploits1References2
20