531 matches found
PT-2018-9418
Name of the Vulnerable Software and Affected Versions BigTree-CMS versions prior to the version containing commit b652cfdc14d0670c81ac4401ad5a04376745c279 Description The issue allows low-privileged users to attack high-privileged users, such as developers, through a Cross Site Scripting XSS...
BigTree cross-site scripting vulnerability (CNVD-2018-10229)
Fastspot BigTree is the United States Fastspot company based on PHP and MySQL open source content management system CMS. A cross-site scripting vulnerability exists in the user management page in Fastspot BigTree versions prior to 4.2.22. The vulnerability can be exploited by a remote attacker to...
BigTree CMS < 4.2.22 XSS Vulnerability
BigTree CMS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
BigTree CMS <= 4.2.22 Remote Upload & Code Execution Vulnerability
BigTree CMS is prone to a remote upload and code execution vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Fastspot BigTree File Upload Vulnerability
Fastspot BigTree is the United States Fastspot company based on PHP and MySQL open source content management system CMS. Fastspot BigTree 4.2.22 and earlier versions of site/index.php/admin/trees/add/ has a security vulnerability , the vulnerability stems from core/inc/bigtree/apis/storage.php fi...
CVE-2018-10364
BigTree before 4.2.22 has XSS in the Users management page via the name or company field...
Design/Logic Flaw
BigTree before 4.2.22 has XSS in the Users management page via the name or company field...
CVE-2018-10364
BigTree before 4.2.22 has XSS in the Users management page via the name or company field...
CVE-2018-10364
BigTree before 4.2.22 has XSS in the Users management page via the name or company field...
CVE-2018-10364
BigTree CMS
CVE-2018-10364
BigTree before 4.2.22 has XSS in the Users management page via the name or company field...
Code injection
site/index.php/admin/trees/add/ in BigTree 4.2.22 and earlier allows remote attackers to upload and execute arbitrary PHP code because the BigTreeStorage class in core/inc/bigtree/apis/storage.php does not prevent uploads of .htaccess files...
CVE-2018-10574
site/index.php/admin/trees/add/ in BigTree 4.2.22 and earlier allows remote attackers to upload and execute arbitrary PHP code because the BigTreeStorage class in core/inc/bigtree/apis/storage.php does not prevent uploads of .htaccess files...
CVE-2018-10574
site/index.php/admin/trees/add/ in BigTree 4.2.22 and earlier allows remote attackers to upload and execute arbitrary PHP code because the BigTreeStorage class in core/inc/bigtree/apis/storage.php does not prevent uploads of .htaccess files...
CVE-2018-10574
site/index.php/admin/trees/add/ in BigTree 4.2.22 and earlier allows remote attackers to upload and execute arbitrary PHP code because the BigTreeStorage class in core/inc/bigtree/apis/storage.php does not prevent uploads of .htaccess files...
CVE-2018-10574
site/index.php/admin/trees/add/ in BigTree 4.2.22 and earlier allows remote attackers to upload and execute arbitrary PHP code because the BigTreeStorage class in core/inc/bigtree/apis/storage.php does not prevent uploads of .htaccess files...
CVE-2018-10574
The CVE-2018-10574 entry pertains to BigTree CMS
PT-2018-9972
Name of the Vulnerable Software and Affected Versions: BigTree versions 4.2.22 and earlier Description: The issue allows remote attackers to upload and execute arbitrary PHP code. This is because the BigTreeStorage class in core/inc/bigtree/apis/storage.php does not prevent uploads of .htaccess...
CVE-2018-10574: Improper Control of Generation of Code
site/index.php/admin/trees/add/ in BigTree 4.2.22 and earlier allows remote attackers to upload and execute arbitrary PHP code because the BigTreeStorage class in core/inc/bigtree/apis/storage.php does not prevent uploads of .htaccess files...
PT-2018-9849
Name of the Vulnerable Software and Affected Versions: BigTree versions prior to 4.2.22 Description: The issue concerns a problem with the Users management page, where input in the name or company field is not properly sanitized, leading to potential XSS issues. Recommendations: For versions prio...