CVE-2018-10574

site/index.php/admin/trees/add/ in BigTree 4.2.22 and earlier allows remote attackers to upload and execute arbitrary PHP code because the BigTreeStorage class in core/inc/bigtree/apis/storage.php does not prevent uploads of .htaccess files...

CVE-2017-6917

CSRF exists in BigTree CMS 4.2.16 with the value parameter to the admin/settings/update/ page. The Colophon can be changed...

CVE-2017-6914

CSRF exists in BigTree CMS 4.1.18 and 4.2.16 with the id parameter to the admin/ajax/users/delete/ page. A user can be deleted...

CVE-2017-6918

CSRF exists in BigTree CMS 4.2.16 with the value parameter to the admin/settings/update/ page. The Navigation Social can be changed...

EUVD-2017-18314

Malware in sbrugna...

EUVD-2013-5153

Malware in sbrugna...

EUVD-2017-18381

Malware in sbrugna...

EUVD-2017-18382

Malware in sbrugna...

EUVD-2017-3346

Malware in sbrugna...

EUVD-2018-9096

Malware in sbrugna...

EUVD-2017-15971

Malware in sbrugna...

EUVD-2017-18313

Malware in sbrugna...

EUVD-2017-15968

Malware in sbrugna...

EUVD-2017-15970

Malware in sbrugna...

EUVD-2013-4724

Malware in sbrugna...

EUVD-2013-4726

Malware in sbrugna...

EUVD-2013-4725

Malware in sbrugna...

EUVD-2017-8130

Malware in sbrugna...

EUVD-2017-18477

Malware in sbrugna...

EUVD-2017-18478

Malware in sbrugna...