CVE-2018-10183

An issue was discovered in BigTree 4.2.22. There is cross-site scripting XSS in /core/inc/lib/less.php/test/index.php because of a $SERVER'REQUESTURI' echo, as demonstrated by the dir parameter in a file=charsets action...

PT-2018-9736

Name of the Vulnerable Software and Affected Versions: BigTree version 4.2.22 Description: The issue is related to cross-site scripting XSS in the /core/inc/lib/less.php/test/index.php file. This occurs due to the echo of the $ SERVER'REQUEST URI' variable. The vulnerability can be demonstrated b...

CVE-2018-10183: Improper Neutralization of Input During Web Page Generation

An issue was discovered in BigTree 4.2.22. There is cross-site scripting XSS in /core/inc/lib/less.php/test/index.php because of a $SERVER'REQUESTURI' echo, as demonstrated by the dir parameter in a file=charsets action...