Lucene search
+L

3 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 12:16 p.m.•18 views

CVE-2018-10574

site/index.php/admin/trees/add/ in BigTree 4.2.22 and earlier allows remote attackers to upload and execute arbitrary PHP code because the BigTreeStorage class in core/inc/bigtree/apis/storage.php does not prevent uploads of .htaccess files...

9.8CVSS8.5AI score0.02157EPSS
SaveExploits1References1
Mend
Mend
•added 2018/04/30 8:00 p.m.•4 views

CVE-2018-10574

site/index.php/admin/trees/add/ in BigTree 4.2.22 and earlier allows remote attackers to upload and execute arbitrary PHP code because the BigTreeStorage class in core/inc/bigtree/apis/storage.php does not prevent uploads of .htaccess files...

9.8CVSS0.02157EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/04/30 12:00 a.m.•4 views

PT-2018-9972

Name of the Vulnerable Software and Affected Versions: BigTree versions 4.2.22 and earlier Description: The issue allows remote attackers to upload and execute arbitrary PHP code. This is because the BigTreeStorage class in core/inc/bigtree/apis/storage.php does not prevent uploads of .htaccess...

9.8CVSS6.5AI score0.02157EPSS
SaveExploits1References5
Rows per page
Query Builder