455 matches found
CVE-2018-1000521
BigTree-CMS contains a Cross Site Scripting XSS vulnerability in /users/create that can result in The low-privileged users can use this vulnerability to attack high-privilegedDeveloper users.. This attack appear to be exploitable via no. This vulnerability appears to have been fixed in after comm...
Cross site scripting
BigTree-CMS contains a Cross Site Scripting XSS vulnerability in /users/create that can result in The low-privileged users can use this vulnerability to attack high-privilegedDeveloper users.. This attack appear to be exploitable via no. This vulnerability appears to have been fixed in after comm...
CVE-2018-1000521
BigTree-CMS has an XSS vulnerability in /users/create. The issue allows low-privilege users to impact high-privilege (Developer) users; the description provides no exploit method and does indicate a fix after commit b652cfdc14d0670c81ac4401ad5a04376745c279. Connected sources also corroborate the ...
CVE-2018-1000521
BigTree-CMS contains a Cross Site Scripting XSS vulnerability in /users/create that can result in The low-privileged users can use this vulnerability to attack high-privilegedDeveloper users.. This attack appear to be exploitable via no. This vulnerability appears to have been fixed in after comm...
CVE-2018-1000521: Improper Neutralization of Input During Web Page Generation
BigTree-CMS contains a Cross Site Scripting XSS vulnerability in /users/create that can result in The low-privileged users can use this vulnerability to attack high-privilegedDeveloper users.. This attack appear to be exploitable via no. This vulnerability appears to have been fixed in after comm...
Fastspot BigTree File Upload Vulnerability
Fastspot BigTree is the United States Fastspot company based on PHP and MySQL open source content management system CMS. Fastspot BigTree 4.2.22 and earlier versions of site/index.php/admin/trees/add/ has a security vulnerability , the vulnerability stems from core/inc/bigtree/apis/storage.php fi...
BigTree CMS <= 4.2.22 Remote Upload & Code Execution Vulnerability
BigTree CMS is prone to a remote upload and code execution vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
BigTree cross-site scripting vulnerability (CNVD-2018-10229)
Fastspot BigTree is the United States Fastspot company based on PHP and MySQL open source content management system CMS. A cross-site scripting vulnerability exists in the user management page in Fastspot BigTree versions prior to 4.2.22. The vulnerability can be exploited by a remote attacker to...
BigTree CMS < 4.2.22 XSS Vulnerability
BigTree CMS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Design/Logic Flaw
BigTree before 4.2.22 has XSS in the Users management page via the name or company field...
CVE-2018-10364
BigTree before 4.2.22 has XSS in the Users management page via the name or company field...
CVE-2018-10364
BigTree before 4.2.22 has XSS in the Users management page via the name or company field...
CVE-2018-10364
BigTree before 4.2.22 has XSS in the Users management page via the name or company field...
CVE-2018-10364
BigTree CMS
Code injection
site/index.php/admin/trees/add/ in BigTree 4.2.22 and earlier allows remote attackers to upload and execute arbitrary PHP code because the BigTreeStorage class in core/inc/bigtree/apis/storage.php does not prevent uploads of .htaccess files...
CVE-2018-10574
site/index.php/admin/trees/add/ in BigTree 4.2.22 and earlier allows remote attackers to upload and execute arbitrary PHP code because the BigTreeStorage class in core/inc/bigtree/apis/storage.php does not prevent uploads of .htaccess files...
CVE-2018-10574
site/index.php/admin/trees/add/ in BigTree 4.2.22 and earlier allows remote attackers to upload and execute arbitrary PHP code because the BigTreeStorage class in core/inc/bigtree/apis/storage.php does not prevent uploads of .htaccess files...
CVE-2018-10574
The CVE-2018-10574 entry pertains to BigTree CMS
CVE-2018-10574
site/index.php/admin/trees/add/ in BigTree 4.2.22 and earlier allows remote attackers to upload and execute arbitrary PHP code because the BigTreeStorage class in core/inc/bigtree/apis/storage.php does not prevent uploads of .htaccess files...
CVE-2018-10574: Improper Control of Generation of Code
site/index.php/admin/trees/add/ in BigTree 4.2.22 and earlier allows remote attackers to upload and execute arbitrary PHP code because the BigTreeStorage class in core/inc/bigtree/apis/storage.php does not prevent uploads of .htaccess files...